Sploitus

Exploit for DNS zone transfer

CVE-1999-0532

saint · 2008-09-24

Exploit Code

MARKDOWN21 lines
## https://sploitus.com/exploit?id=SAINT:E285819EA8A08170FDD0A668ED7FD898
Added: 09/24/2008  
CVE: [CVE-1999-0532](<https://vulners.com/cve/CVE-1999-0532>)  
OSVDB: [492](<http://www.osvdb.org/492>)  


### Background

A [DNS zone transfer](<http://support.microsoft.com/kb/164017>) is the process by which a secondary name server copies all DNS records for a domain from a primary name server. 

### Problem

If DNS zone transfers are not restricted, they can allow attackers to enumerate hosts in a domain. 

### Resolution

Configure the primary DNS server to allow zone transfers only from secondary DNS servers. In BIND, this can be done in an `**allow-transfer**` block in the `**options**` section of the `**named.conf**` file. 

### References

<http://www.tfug.org/helpdesk/security/bind.html>