CVE-2001-0497

HIGH · CVSS 7.8 EPSS 0.43%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2001-07-21 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2001-0497

Severity

HIGH

CVSS

7.8

EPSS

0.43%

Original Filing — NVD Description

dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which allows attackers to obtain the keys and perform dynamic DNS updates.