CVE-1999-1499: ISC BIND

Low severity, CVSS 2.1. EPSS: 0.7% chance of exploitation in the next 30 days.

named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used.

Affected products

• ISC BIND: version 4.9 only; version 8.1 only

Published 1998-04-10. Last modified 2026-06-16.