PT-2006-4788 · Microsoft · Windows Server 2003+4

Gerardo Richarte · Publicado 2006-07-31 · Atualizado 2018-10-17 · CVE-2006-3942

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows NT 4.0 Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003

Description A denial of service issue exists due to the way the Server service handles certain network messages. This can be exploited by sending a specially crafted network message, potentially causing the system to crash. The issue is related to the ExecuteTransaction function and the handling of SMB messages without null character termination, which can lead to a NULL dereference.

Recommendations For Microsoft Windows NT 4.0, consider disabling the Server service until a patch is available. For Microsoft Windows 2000, restrict access to the Server service to minimize the risk of exploitation. For Microsoft Windows XP, avoid using the Server service for critical operations until the issue is resolved. For Microsoft Windows Server 2003, consider implementing network message filtering to block specially crafted messages.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2006-3942

Produtos afetados

Windows 2000

Windows Nt 4.0

Windows Server 2003

Windows Xp

Windows

Referências · 27

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/smb/ms06_035_mailslot.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/smb/ms06_063_trans.rb · Exploit
• 🔥 https://exploit-db.com/exploits/2057 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27999 · Nota
• http://securitytracker.com/id?1017035 · Nota
• http://securitytracker.com/id?1016606 · Nota
• http://milw0rm.com//exploits/2057 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3942 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-063 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/3037 · Aviso do Fabricante
• http://coresecurity.com/common/showdoc.php?idx=562&idxseccion=10 · Nota
• http://secunia.com/advisories/21276 · Aviso do Fabricante
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:428 · Nota
• http://securityfocus.com/archive/1/archive/1/449179/100/0/threaded · Nota
• http://xforce.iss.net/xforce/xfdb/27999 · Nota