What’s Vulnerable › Vulnerabilities

CVE-2001-0497

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2001-07-21 · updated 2026-06-16
• Weakness: CWE-276

Description

dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which allows attackers to obtain the keys and perform dynamic DNS updates.

Affected products

• ISC BIND: through 8.2.4; from 9.0 through 9.1.2

References

• http://www.osvdb.org/5609
• http://xforce.iss.net/alerts/advise78.php
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6694
• http://www.osvdb.org/5609
• http://xforce.iss.net/alerts/advise78.php
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6694

Get alerted when CVE-2001-0497 or the next vulnerability affects your stack