Unscored CVE-2001-0497 EUVD-2001-0493GHSA-r698-fc6p-rp6g

dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key…

Published Mar 9, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which allows attackers to obtain the keys and perform dynamic DNS updates.

References

bind-local-key-exposure(6694) vdb-entry
5609 vdb-entry
20010611 BIND Inadvertent Local Exposure of HMAC-MD5 (TSIG) Keys third-party-advisory