PT-2006-1447 · Microsoft · Windows 2000+2

Dino A. Dai Zovi · Published 2006-01-22 · Updated 2018-10-19 · CVE-2006-0376

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows 2000 Windows XP Windows Server 2003

Description The issue concerns the 802.11 wireless client in certain operating systems, which fails to alert users in two scenarios: when it connects to a station in ad hoc mode and when a station in ad hoc mode connects to it. This oversight allows remote attackers to initiate unexpected wireless communication.

Recommendations For Windows 2000, consider disabling ad hoc mode until a fix is available. For Windows XP, restrict wireless connections to only trusted networks to minimize risk. For Windows Server 2003, avoid using ad hoc mode for wireless connections until the issue is resolved.

Fix

Related Identifiers

CVE-2006-0376

Affected Products

Windows 2000

Windows Server 2003

Windows Xp

References · 8

• http://nmrc.org/pub/advise/20060114.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0376 · Security Note
• http://securiteam.com/windowsntfocus/5YP0D2KHHO.html · Note
• http://securityreason.com/securityalert/349 · Note
• http://securitytracker.com/id?1015489 · Note
• http://theta44.org/karma · Note
• http://securityfocus.com/archive/1/421868/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24157 · Note