PT-2006-1112 · Microsoft · Windows Xp+2

Dookie · Publicado 2006-02-14 · Atualizado 2018-10-19 · CVE-2006-0021

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP1 through SP2 Microsoft Windows Server 2003 versions up to SP1

Description: A denial of service issue exists, allowing remote attackers to cause the system to hang via an IGMP packet with an invalid IP option. An attacker could send a specially crafted IGMP packet to the affected system, causing it to stop responding.

Recommendations: For Microsoft Windows XP versions SP1 through SP2, apply the necessary configuration changes to restrict the handling of IGMP packets. For Microsoft Windows Server 2003 versions up to SP1, restrict access to the system to minimize the risk of exploitation until a fix is available. As a temporary workaround, consider disabling the handling of IGMP v3 packets until a patch is available.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2006-0021

Produtos afetados

Windows Server 2003

Windows Xp

Windows

Referências · 28

• 🔥 https://exploit-db.com/exploits/1603 · Exploit
• 🔥 https://exploit-db.com/exploits/1599 · Exploit
• http://kb.cert.org/vuls/id/839284 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1425 · Nota
• http://secunia.com/advisories/18853 · Aviso do Fabricante
• http://frsirt.com/english/advisories/2006/0576 · Nota
• http://us-cert.gov/cas/techalerts/TA06-045A.html · Nota
• http://securityfocus.com/archive/1/482658/30/4350/threaded · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1310 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0021 · Nota de Segurança
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1647 · Nota
• http://securitytracker.com/id?1015629 · Nota
• http://xforce.iss.net/xforce/xfdb/24489 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24489 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-007 · Aviso do Fabricante