{"id":"CVE-2006-0987","aliases":["DEBIAN-CVE-2006-0987","EUVD-2006-0990","GHSA-rmj9-c82h-2f4h"],"status":"published","title":"The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server,...","description":"The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.57858,"percentile":0.99091,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"published":"2006-03-03T11:00:00Z","modified":"2026-10-09T23:47:28Z","exploits":[{"source":"metasploit","id":"auxiliary/scanner/dns/dns_amp","title":"DNS Amplification Scanner","type":"auxiliary","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/dns/dns_amp"},{"source":"pocgithub","id":"pcastagnaro/dns_amplification_scanner","title":"pcastagnaro/dns_amplification_scanner","date":"2024-09-20","url":"https://github.com/pcastagnaro/dns_amplification_scanner"}],"fixes":[{"ecosystem":"Debian:12","package":"bind9","fixed_in":["1:9.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bind9","fixed_in":["1:9.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bind9","fixed_in":["1:9.4.0-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.4.0-1"}]}]}],"products":[{"vendor":"isc","product":"bind"}],"references":[{"url":"http://kb.isc.org/article/AA-00269","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://dns.measurement-factory.com/surveys/sum1.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://www.securityfocus.com/archive/1/426368/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.us-cert.gov/reading_room/DNS-recursion121605.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0987"},{"url":"https://github.com/advisories/GHSA-rmj9-c82h-2f4h"},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-0987","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2006-0987","description":"The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.","status":"published","published":"2006-03-03T11:00:00Z","modified":"2026-10-09T19:05:19.766Z","updated_at":"2026-11-02T14:33:52.947472Z"}],"euvd":[{"id":"EUVD-2006-0990","description":"The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.","status":"published","published":"2006-03-03T11:00:00Z","modified":"2026-10-09T19:05:19Z","updated_at":"2026-11-02T17:27:24.157251Z"}],"ghsa":[{"id":"GHSA-rmj9-c82h-2f4h","title":"The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server,...","description":"The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.","status":"published","published":"2022-05-01T06:44:43Z","modified":"2023-01-31T05:00:46Z","updated_at":"2026-11-02T14:47:55.645Z"}],"nvd":[{"id":"CVE-2006-0987","description":"The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.","status":"published","published":"2006-03-03T11:02:00Z","modified":"2026-10-09T20:17:02.613Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:00.920802Z"}],"osv":[{"id":"CVE-2006-0987","description":"The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.","status":"published","published":"2006-03-03T11:02:00Z","modified":"2026-04-10T03:37:24.90281Z","updated_at":"2026-11-02T15:43:56.581247Z"},{"id":"DEBIAN-CVE-2006-0987","description":"The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.","status":"published","published":"2006-03-03T11:02:00Z","modified":"2026-10-09T23:47:28.463704598Z","updated_at":"2026-11-02T15:45:22.831407Z"}]}}