Denial of Service Vulnerability in Microsoft DNS Server on Windows Platforms

CVE-2006-0988

Summary

The default configuration of Microsoft DNS Server on platforms such as Windows Server 2003 and Windows 2000 allows for recursive queries and can expose sensitive delegation information to arbitrary IP addresses. This vulnerability can be exploited by remote attackers who send DNS queries with spoofed source IP addresses, potentially leading to a denial of service through traffic amplification techniques. Organizations using these versions of the Microsoft DNS Server should review their configurations to mitigate the risk of exploitation.

References