Denial of Service Vulnerability in Microsoft DNS Server on Windows Platforms
CVE-2006-0988

Currently unrated

Key Information:

Vendor

Microsoft
Status
Windows Nt
Windows 2000
Windows 2003 Server
Vendor
CVE Published:
3 March 2006

What is CVE-2006-0988?

The default configuration of Microsoft DNS Server on platforms such as Windows Server 2003 and Windows 2000 allows for recursive queries and can expose sensitive delegation information to arbitrary IP addresses. This vulnerability can be exploited by remote attackers who send DNS queries with spoofed source IP addresses, potentially leading to a denial of service through traffic amplification techniques. Organizations using these versions of the Microsoft DNS Server should review their configurations to mitigate the risk of exploitation.

References

http://dns.measurement-factory.com/surveys/sum1.html
x_refsource_MISC
http://www.securityfocus.com/archive/1/426368/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.us-cert.gov/reading_room/DNS-recursion121605.pdf
x_refsource_MISC

EPSS Score

55% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.