ID:10002 - Exploit for Resource exhaustion in ISC BIND - CVE-2006-0987

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to the default configuration of ISC BIND when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses. A remote attacker can trigger resource exhaustion and cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.

Remediation