PT-2006-3341 · Microsoft · Windows 2000+3

Andrey Minaev · Publicado 2006-06-13 · Atualizado 2019-04-30 · CVE-2006-2379

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1

Description A buffer overflow issue exists in the TCP/IP Protocol driver, allowing remote attackers to execute arbitrary code via unknown vectors related to IP source routing.

Recommendations For Microsoft Windows 2000, apply the patch or update to at least SP4. For Microsoft Windows XP, apply the patch or update to at least SP3. For Microsoft Windows Server 2003, apply the patch or update to at least SP2. As a temporary workaround, consider restricting IP source routing to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2006-2379

Produtos afetados

Tcp/Ip Protocol Driver

Windows 2000

Windows Server 2003

Windows Xp

Referências · 20

• 🔥 https://exploit-db.com/exploits/1967 · Exploit
• http://securitytracker.com/id?1016290 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1712 · Nota
• http://secunia.com/advisories/20639 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1787 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-032 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26834 · Nota
• http://osvdb.org/26433 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2018 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1585 · Nota
• http://securityfocus.com/archive/1/438609/100/0/threaded · Nota
• http://kb.cert.org/vuls/id/722753 · Correção
• http://securityfocus.com/bid/18374 · Correção
• http://us-cert.gov/cas/techalerts/TA06-164A.html · Nota
• http://vupen.com/english/advisories/2006/2329 · Nota