PT-2006-1447 · Microsoft · Windows 2000+2

Dino A. Dai Zovi · Publicado 2006-01-22 · Atualizado 2018-10-19 · CVE-2006-0376

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows 2000 Windows XP Windows Server 2003

Description The issue concerns the 802.11 wireless client in certain operating systems, which fails to alert users in two scenarios: when it connects to a station in ad hoc mode and when a station in ad hoc mode connects to it. This oversight allows remote attackers to initiate unexpected wireless communication.

Recommendations For Windows 2000, consider disabling ad hoc mode until a fix is available. For Windows XP, restrict wireless connections to only trusted networks to minimize risk. For Windows Server 2003, avoid using ad hoc mode for wireless connections until the issue is resolved.

Correção

Identificadores relacionados

CVE-2006-0376

Produtos afetados

Windows 2000

Windows Server 2003

Windows Xp

Referências · 8

• http://nmrc.org/pub/advise/20060114.txt · Aviso do Fabricante
• http://securiteam.com/windowsntfocus/5YP0D2KHHO.html · Nota
• http://securityreason.com/securityalert/349 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0376 · Nota de Segurança
• http://securitytracker.com/id?1015489 · Nota
• http://theta44.org/karma · Nota
• http://securityfocus.com/archive/1/421868/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24157 · Nota