CVE-2006-0987: ISC BIND

Medium severity, CVSS 5.0. EPSS: 58% chance of exploitation in the next 30 days.

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.

Affected products

• ISC BIND: version 9.3.2 only

Published 2006-03-03. Last modified 2026-10-09.