CVE-2006-0987

5.0 medium exploit ×2 SSVC exploitation: none Modified

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.

Fix

Public exploits 2

DNS Amplification Scanner (auxiliary module) Metasploit
pcastagnaro/dns_amplification_scanner PoC on GitHub

Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.

Patch, vendor advisory and mitigation references on NVD 2

http://www.us-cert.gov/reading_room/DNS-recursion121605.pdf Patch, Vendor Advisory
http://www.us-cert.gov/reading_room/DNS-recursion121605.pdf Patch, Vendor Advisory

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

CVE-2006-0987

Fix

Public exploits 2

Patch, vendor advisory and mitigation references on NVD 2

Change history 1

Affected (CPE criteria) 1

References 8