P4Verified

CVE-2006-0987: bind 9.3.2; +1 more affected products

CVE-2006-0987. CVSS 2.0 base score 5.0 (MEDIUM, NVD). EPSS 0.58033 (percentile 0.99071), scored 2026-10-08.

Affected technology

bind · 9.3.2
isc

n/a · n/a
Vendor not specified by the source

Description’s affected range: before 9.4.1-P1, when configured as a caching name server,

Component: Not specified by the source

Attack conditions (NVD, CVSS 2.0): Network (remote)

What an attacker can do

The source says the default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses. NVD’s CVSS 2.0 assessment (base score 5.0/10) rates confidentiality and integrity impact as none; availability impact as partial.

Published 2026-10-09 21:09:36.178523+00:00

CCR priority: 34.5 /100 (P4)
CVSS 2.0: 5.0 /10 · CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P · NVD
EPSS: 0.58033 · percentile 0.99072 · 2026-10-09
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-09 21:11:27.988868+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-09 21:08:49.498434+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2006-0987.html