CVE-2006-0988

Currently unrated

Key Information:

Vendor
Microsoft
Status
Windows Nt
Windows 2000
Windows 2003 Server
Vendor
CVE Published:
3 March 2006

Summary

The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.

References

http://dns.measurement-factory.com/surveys/sum1.html
x_refsource_MISC
http://www.securityfocus.com/archive/1/426368/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.us-cert.gov/reading_room/DNS-recursion121605.pdf
x_refsource_MISC

EPSS Score

9% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.