PT-2006-1112 · Microsoft · Windows Xp+2

Dookie · Published 2006-02-14 · Updated 2018-10-19 · CVE-2006-0021

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP1 through SP2 Microsoft Windows Server 2003 versions up to SP1

Description: A denial of service issue exists, allowing remote attackers to cause the system to hang via an IGMP packet with an invalid IP option. An attacker could send a specially crafted IGMP packet to the affected system, causing it to stop responding.

Recommendations: For Microsoft Windows XP versions SP1 through SP2, apply the necessary configuration changes to restrict the handling of IGMP packets. For Microsoft Windows Server 2003 versions up to SP1, restrict access to the system to minimize the risk of exploitation until a fix is available. As a temporary workaround, consider disabling the handling of IGMP v3 packets until a patch is available.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2006-0021

Affected Products

Windows Server 2003

Windows Xp

Windows

References · 28

• 🔥 https://exploit-db.com/exploits/1603 · Exploit
• 🔥 https://exploit-db.com/exploits/1599 · Exploit
• http://secunia.com/advisories/18853 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0021 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-007 · Vendor Advisory
• http://securityfocus.com/bid/16645 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0021 · Security Note
• http://vupen.com/english/advisories/2006/0576 · Vendor Advisory
• http://kb.cert.org/vuls/id/839284 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1425 · Note
• http://frsirt.com/english/advisories/2006/0576 · Note
• http://us-cert.gov/cas/techalerts/TA06-045A.html · Note
• http://securityfocus.com/archive/1/482658/30/4350/threaded · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1310 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1647 · Note