PT-2006-2326 · Microsoft · Windows Server 2003+3

Mike Price + 2 · Publicado 2006-07-11 · Atualizado 2018-10-18 · CVE-2006-1315

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to Server 2003 SP2 Microsoft Windows 2000 SP4 Microsoft Windows XP SP1 and SP2

Description The issue allows remote attackers to obtain sensitive information via crafted requests that leak information in SMB buffers, which are not properly initialized. This is due to an information disclosure vulnerability in the Server service, which could allow an attacker to view fragments of memory used to store SMB traffic during transport.

Recommendations For Microsoft Windows 2000 SP4, consider applying the necessary security patches to resolve the issue. For Microsoft Windows XP SP1 and SP2, update to a newer service pack to mitigate the risk. For Microsoft Windows Server 2003 up to SP1, apply the security update or upgrade to Server 2003 SP2 or later. As a temporary workaround, consider restricting access to the Server service to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-1315

Produtos afetados

Windows

Windows 2000

Windows Server 2003

Windows Xp

Referências · 18

• 🔥 https://exploit-db.com/exploits/2057 · Exploit
• http://kb.cert.org/vuls/id/333636 · Nota
• http://securityfocus.com/archive/1/439881/100/0/threaded · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-035 · Aviso do Fabricante
• http://osvdb.org/27155 · Nota
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1315 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2006-1315 · Nota de Segurança
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-035 · Nota
• http://vupen.com/english/advisories/2006/2753 · Nota
• http://frsirt.com/english/advisories/2006/2753 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26820 · Nota
• http://securityfocus.com/bid/18891 · Nota
• http://secunia.com/advisories/21007 · Nota
• http://securitytracker.com/id?1016467 · Nota