CVE-2006-0987

CVE-2006-0987

Medium · published March 3, 2006

Patch now

High probability of exploitation

CVSS calls it medium at 5.0. It sits in the 99.1th percentile for exploit probability.

CVSS v2.0
5.0
EPSS
58%
Percentile
99.1
In the wild
Unconfirmed
What it is

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.

The record
Technical detail
CVSS v2.0
5.0 · MEDIUM
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS v4.0
Not supplied
EPSS
0.57858 · 99.1th percentile
Published
2006-03-03T16:02Z
Affected products (1)
ProductVersionsFixed in
isc/bindall versions—
References (8)
http://dns.measurement-factory.com/surveys/sum1.html · [email protected]http://kb.isc.org/article/AA-00269 · [email protected]http://www.securityfocus.com/archive/1/426368/100/0/threaded · [email protected]http://www.us-cert.gov/reading_room/DNS-recursion121605.pdf · [email protected]http://dns.measurement-factory.com/surveys/sum1.html · af854a3a-2127-422b-91ae-364da2661108http://kb.isc.org/article/AA-00269 · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/426368/100/0/threaded · af854a3a-2127-422b-91ae-364da2661108http://www.us-cert.gov/reading_room/DNS-recursion121605.pdf · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 03 MAR 11:00Z
    The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation…
    cvelistv5