Unrated severityNVD Advisory· Published Mar 3, 2006· Updated Jun 16, 2026

CVE-2006-0988

Description

The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Windows 20002 versions
cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
- (no CPE)
Microsoft/Windows Server 20032 versions
cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*
- (no CPE)
Microsoft/Windows Nt
cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
Microsoft/Windows NT 4.0llm-fuzzy
Range: =4.0

Patches

Vulnerability mechanics

References

www.us-cert.gov/reading_room/DNS-recursion121605.pdfnvdPatchVendor Advisory
dns.measurement-factory.com/surveys/sum1.htmlnvd
www.securityfocus.com/archive/1/426368/100/0/threadednvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.044
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000