CVE-2006-2073

MEDIUM
MEDIUM Priority: 0.41 BB Relevance: 47/100
Published: 2006-04-27 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity

CVSS Vector Breakdown

AV: Network
AC: Low
C: None
I: None
A: P

Description

Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG, as demonstrated by the OUSPG PROTOS DNS test suite.

Affected Software (13)

VendorProductVersion
isc bind 9.0
isc bind 9.0.1
isc bind 9.1
isc bind 9.1.1
isc bind 9.1.2
isc bind 9.1.3
isc bind 9.2.0
isc bind 9.2.1
isc bind 9.2.2
isc bind 9.2.3
isc bind 9.3
isc bind 9.3.1
isc bind 9.3.2

Bug Bounty Relevance

47 / 100
✓ Network accessible
✓ Low complexity

CVSS Score

5.0 / 10.0 v2.0
AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS — Exploitation Probability

8.13%
Raw Score 0.081290
Percentile 94.8%
Date 2026-10-29

Intelligence Sources

nvd ref →