PT-2006-1108 · Microsoft · Windows Xp+2

Kostya Kortchinsky · Published 2006-02-14 · Updated 2018-10-12 · CVE-2006-0013

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP1 through SP2 Microsoft Windows Server 2003 versions up to SP1

Description: A buffer overflow issue in the Web Client service allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests. This could enable an attacker to take complete control of the affected system.

Recommendations: For Microsoft Windows XP versions SP1 through SP2, update to a newer service pack to resolve the issue. For Microsoft Windows Server 2003 versions up to SP1, update to a newer service pack to resolve the issue. As a temporary workaround, consider restricting access to the Web Client service until a patch is available.

Fix

Related Identifiers

CVE-2006-0013

Affected Products

Windows Server 2003

Windows Xp

Windows

References · 22

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-008 · Vendor Advisory
• http://securityfocus.com/bid/16636 · Patch
• http://secunia.com/advisories/18857 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0013 · Security Note
• http://securitytracker.com/id?1015630 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-0013 · Security Note
• http://xforce.iss.net/xforce/xfdb/24491 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1602 · Note
• http://frsirt.com/english/advisories/2006/0577 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-008 · Note
• http://kb.cert.org/vuls/id/388900 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A683 · Note
• http://vupen.com/english/advisories/2006/0577 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1220 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A716 · Note