CVE-2000-0887
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making...
CVE-2000-0887 is a medium vulnerability (CVSS 5.0) in Isc Bind, published December 19, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 22.9%, the 97th percentile. No source names a fixed version.
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."
Exploit likelihood
What each source reports
NVD Score used
5.0
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."
- Record
CVE-2000-0887- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."
- Record
CVE-2000-0887- Updated
- 2026-11-02
EUVDEUVD-2000-0874 No score
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."
- Record
EUVD-2000-0874- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fjf9-x8mw-r853 No score
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making...
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."
- Record
GHSA-fjf9-x8mw-r853- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | ISC BIND 8.2.2-P5 - Denial of Service | 2000-11-01 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |
References
redhat.com/support/errata/RHSA-2000-107.html
frontal2.mandriva.com/security/advisories?name=MDKSA-2000:067
archives.neohapsis.com/archives/bugtraq/2000-11/0217.html
securityfocus.com/archive/1/143843
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000338
cert.org/advisories/CA-2000-20.html
Show 7 moreShow less
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000339
exchange.xforce.ibmcloud.com/vulnerabilities/5540
securityfocus.com/bid/1923
archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html
debian.org/security/2000/20001112
nvd.nist.gov/vuln/detail/CVE-2000-0887
github.com/advisories/GHSA-fjf9-x8mw-r853