CVE-2000-0887 - Vulnerability Details - OpenCVE

named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.173.

Key SSVC decision points have not yet been added.

Vendors	Products
Isc	Bind

Configuration 1 [-]

cpe:2.3:a:isc:bind:8.2.2:p5:*:*:*:*:*:*

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://archives.neohapsis.com/archives/bugtraq/2000-11/0217.html
http://archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000338
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000339
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:067
http://www.cert.org/advisories/CA-2000-20.html
http://www.debian.org/security/2000/20001112
http://www.redhat.com/support/errata/RHSA-2000-107.html
http://www.securityfocus.com/archive/1/143843
http://www.securityfocus.com/bid/1923
https://exchange.xforce.ibmcloud.com/vulnerabilities/5540
https://www.cve.org/CVERecord?id=CVE-2000-0887

History

Wed, 28 May 2025 14:30:00 +0000

Type	Values Removed	Values Added
References		https://www.cve.org/CVERecord?id=CVE-2000-0887

Thu, 22 May 2025 04:15:00 +0000

Type	Values Removed	Values Added
References	https://nvd.nist.gov/vuln/detail/CVE-2000-0887 https://www.cve.org/CVERecord?id=CVE-2000-0887

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2001-01-22T05:00:00

Updated: 2024-08-08T05:37:31.266Z

Reserved: 2000-11-14T00:00:00

Link: CVE-2000-0887

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2000-12-19T05:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2000-0887

Redhat

Severity :

Publid Date: 2000-11-07T00:00:00Z

Links: CVE-2000-0887 - Bugzilla

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2000-11-07T00:00:00", "descriptions": [{"lang": "en", "value": "named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the \"zxfr bug.\""}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2004-09-02T09:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "RHSA-2000:107", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2000-107.html"}, {"name": "MDKSA-2000:067", "tags": ["vendor-advisory", "x_refsource_MANDRAKE"], "url": "http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:067"}, {"name": "20001115 Trustix Security Advisory - bind and openssh (and modutils)", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2000-11/0217.html"}, {"name": "20001107 BIND 8.2.2-P5 Possible DOS", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/143843"}, {"name": "CLSA-2000:338", "tags": ["vendor-advisory", "x_refsource_CONECTIVA"], "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000338"}, {"name": "CA-2000-20", "tags": ["third-party-advisory", "x_refsource_CERT"], "url": "http://www.cert.org/advisories/CA-2000-20.html"}, {"name": "CLSA-2000:339", "tags": ["vendor-advisory", "x_refsource_CONECTIVA"], "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000339"}, {"name": "bind-zxfr-dos(5540)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5540"}, {"name": "1923", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/1923"}, {"name": "SuSE-SA:2000:45", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html"}, {"name": "20001112 bind: remote Denial of Service", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2000/20001112"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2000-0887", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the \"zxfr bug.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "RHSA-2000:107", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2000-107.html"}, {"name": "MDKSA-2000:067", "refsource": "MANDRAKE", "url": "http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:067"}, {"name": "20001115 Trustix Security Advisory - bind and openssh (and modutils)", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2000-11/0217.html"}, {"name": "20001107 BIND 8.2.2-P5 Possible DOS", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/143843"}, {"name": "CLSA-2000:338", "refsource": "CONECTIVA", "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000338"}, {"name": "CA-2000-20", "refsource": "CERT", "url": "http://www.cert.org/advisories/CA-2000-20.html"}, {"name": "CLSA-2000:339", "refsource": "CONECTIVA", "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000339"}, {"name": "bind-zxfr-dos(5540)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5540"}, {"name": "1923", "refsource": "BID", "url": "http://www.securityfocus.com/bid/1923"}, {"name": "SuSE-SA:2000:45", "refsource": "SUSE", "url": "http://archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html"}, {"name": "20001112 bind: remote Denial of Service", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2000/20001112"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T05:37:31.266Z"}, "title": "CVE Program Container", "references": [{"name": "RHSA-2000:107", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2000-107.html"}, {"name": "MDKSA-2000:067", "tags": ["vendor-advisory", "x_refsource_MANDRAKE", "x_transferred"], "url": "http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:067"}, {"name": "20001115 Trustix Security Advisory - bind and openssh (and modutils)", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2000-11/0217.html"}, {"name": "20001107 BIND 8.2.2-P5 Possible DOS", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/143843"}, {"name": "CLSA-2000:338", "tags": ["vendor-advisory", "x_refsource_CONECTIVA", "x_transferred"], "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000338"}, {"name": "CA-2000-20", "tags": ["third-party-advisory", "x_refsource_CERT", "x_transferred"], "url": "http://www.cert.org/advisories/CA-2000-20.html"}, {"name": "CLSA-2000:339", "tags": ["vendor-advisory", "x_refsource_CONECTIVA", "x_transferred"], "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000339"}, {"name": "bind-zxfr-dos(5540)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5540"}, {"name": "1923", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/1923"}, {"name": "SuSE-SA:2000:45", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html"}, {"name": "20001112 bind: remote Denial of Service", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2000/20001112"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2000-0887", "datePublished": "2001-01-22T05:00:00", "dateReserved": "2000-11-14T00:00:00", "dateUpdated": "2024-08-08T05:37:31.266Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:isc:bind:8.2.2:p5:*:*:*:*:*:*", "matchCriteriaId": "30D2ACB3-BE6D-4948-AFC3-16EAD173F595", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the \"zxfr bug.\""}], "id": "CVE-2000-0887", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2000-12-19T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://archives.neohapsis.com/archives/bugtraq/2000-11/0217.html"}, {"source": "cve@mitre.org", "url": "http://archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html"}, {"source": "cve@mitre.org", "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000338"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000339"}, {"source": "cve@mitre.org", "url": "http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:067"}, {"source": "cve@mitre.org", "tags": ["US Government Resource"], "url": "http://www.cert.org/advisories/CA-2000-20.html"}, {"source": "cve@mitre.org", "url": "http://www.debian.org/security/2000/20001112"}, {"source": "cve@mitre.org", "url": "http://www.redhat.com/support/errata/RHSA-2000-107.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/143843"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/1923"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5540"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://archives.neohapsis.com/archives/bugtraq/2000-11/0217.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000338"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000339"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:067"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["US Government Resource"], "url": "http://www.cert.org/advisories/CA-2000-20.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2000/20001112"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.redhat.com/support/errata/RHSA-2000-107.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/143843"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/1923"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5540"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}