Security readout for executives and security teams
A very old flaw in the "host" DNS lookup utility (associated with ISC BIND) lets an attacker who controls a DNS server reply crash the tool or run commands on the machine running it. It only matters if someone runs a vulnerable legacy version of "host" and points it at a hostile DNS zone. Modern systems shipping current BIND/host builds are not affected. Extremely limited in 2026. Exposure requires running a ~2000-era build of the "host" utility from an old ISC BIND distribution and voluntarily issuing an AXFR against an attacker-controlled zone. Contemporary Linux/BSD distributions ship long-patched host binaries, and modern host commands do not share this code path. No KEV entry and no evidence of active exploitation. Informational. This is a 25-year-old client-side flaw in a deprecated DNS lookup tool with no KEV listing and no evidence of current exploitation. Handle through normal legacy-system hygiene; no emergency action required. Mitigation focus: Use the host/dig utilities shipped with a currently supported BIND or distribution package.; Retire any archival Unix systems still running late-1990s BIND userland tools.; Avoid running lookup tools against untrusted authoritative name servers from privileged accounts..
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2000-1029 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- isc-bind-axfr-bo(5462)CVE reference · vdb-entry, x_refsource_XF
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.