The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification via DNS queries with spoofed source IP addresses. Please see following for more information :

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0987

The remote DNS server answers to any request.  It is possible to query the name servers (NS) of the root zone ('.') and get an answer that is bigger than the original request.  By spoofing the source IP address, a remote attacker can leverage this 'amplification' to launch a denial of service attack against a third-party host using the remote DNS server.

ID	Name	Product	Family	Severity
77256	AIX 5.3 TL 12 : bind9 (IV62327)	Nessus	AIX Local Security Checks	medium
77255	AIX 6.1 TL 9 : bind9 (IV62225)	Nessus	AIX Local Security Checks	medium
77254	AIX 6.1 TL 7 : bind9 (IV62224)	Nessus	AIX Local Security Checks	medium
77253	AIX 6.1 TL 8 : bind9 (IV62146)	Nessus	AIX Local Security Checks	medium
77252	AIX 7.1 TL 1 : bind9 (IV61093)	Nessus	AIX Local Security Checks	medium
77251	AIX 7.1 TL 2 : bind9 (IV61090)	Nessus	AIX Local Security Checks	medium
77250	AIX 7.1 TL 3 : bind9 (IV61027)	Nessus	AIX Local Security Checks	medium
35450	DNS Server Spoofed Request Amplification DDoS	Nessus	DNS	high

Detections

Analytics

CVE-2006-0987

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

high