Skip to content
OpenAdvisories
Unscored Public exploit CVE-1999-0532 EUVD-1999-0530GHSA-926f-mjrv-g5m6

A DNS server allows zone transfers.

Published Feb 4, 2000 · Updated Mar 17, 2025 · Assigned by mitre

Description

A DNS server allows zone transfers.

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Metasploit 1 module

GitHub 3 repositories

  • websecnl/Bulk_CVE-1999-0532_Scanner ★ 4 · Feb 6, 2018

    A tool i made for use in combination with hackerone.com for Bounty Hacking purposes.

  • Rodney-O-C-Melby/dns-zone-transfer-test ★ 3 · Feb 11, 2021

    Automates Domain Name System (DNS) zone transfer testing. Checks for CVE-1999-0532 by automatically finding a given domains nameservers, and tests for zone transfers, if successful, subdomains are pr…

  • SleepTheGod/dns-zone-audit ★ 1 · Mar 25, 2026

    This Bash script checks domains for DNS zone transfer misconfigurations (CVE-1999-0532). It queries name servers and attempts AXFR requests; if successful, it reveals full DNS records, indicating a s…

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References