CVE-2006-0988

Microsoft DNS Server on Windows NT 4.0, 2000, and 2003 Server - Denial of Service via Spoofed Recursive Queries

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0988. Includes Metasploit module auxiliary/scanner/dns/dns_amp.

AI-analyzed exploit summary This Metasploit module scans for DNS servers vulnerable to amplification attacks by sending crafted DNS queries and analyzing responses for recursion availability and amplification potential.

Description

The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.

Exploits (1)

metasploit SCANNER
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/dns/dns_amp.rb

This Metasploit module scans for DNS servers vulnerable to amplification attacks by sending crafted DNS queries and analyzing responses for recursion availability and amplification potential.

Classification
Scanner 100%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: DNS servers with recursive name lookups enabled
No auth needed
Prerequisites: Network access to target DNS servers · UDP port 53 accessibility
mistral-large-3 · analyzed May 19, 2026 Full analysis →

References (3)

Core 3
Core References
Various Sources x_refsource_misc
http://dns.measurement-factory.com/surveys/sum1.html
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/426368/100/0/threaded
Patch, Vendor Advisory x_refsource_misc
http://www.us-cert.gov/reading_room/DNS-recursion121605.pdf

Scores

EPSS 0.5497
EPSS Percentile 98.9%

Details

Status published
Products (3)
microsoft/windows_2000
microsoft/windows_2003_server r2
microsoft/windows_nt 4.0
Published Mar 03, 2006
Tracked Since Feb 18, 2026