CVE-2001-0497

dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS…

published March 9, 2002

CVSS
—
EPSS
0%
Percentile
36.2
In the wild
Unconfirmed
What it is

dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which allows attackers to obtain the keys and perform dynamic DNS updates.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00431 · 36.2th percentile
Published
2002-03-09T05:00Z
EPSS history
Timeline
  • 09 MAR 05:00Z
    dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS…
    cvelistv5