What is CVE-2006-0987?

CVE-2006-0987 is a vulnerability in Isc Bind. Published 2006-03-03.

Is CVE-2006-0987 known to be exploited?

7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Isc Bind

CVE-2006-0987

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.

Published 2006-03-03 · last modified 2026-10-09.

CVSS v2 metric

CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.579 (99.1th percentile), scored 2026-10-29.

High probability of exploitation in the next 30 days — patch promptly. 99th percentile — 99.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.580 · newest: 0.579 · change: -0.002

Affected products

Isc Bind — versions 9.3.2

Public proof-of-concept exploits

References

kb.isc.org/article/AA-00269
dns.measurement-factory.com/surveys/sum1.html
www.securityfocus.com/archive/1/426368/100/0/threaded (mailing-list)
www.us-cert.gov/reading_room/DNS-recursion121605.pdf (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2006-0987?: CVE-2006-0987 is a vulnerability in Isc Bind. Published 2006-03-03.
Is CVE-2006-0987 known to be exploited?: 7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.