PT-2006-2325 · Microsoft · Windows Server 2003+3

H D Moore + 1 · Published 2006-07-11 · Updated 2018-10-18 · CVE-2006-1314

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to Server 2003 SP2 Microsoft Windows 2000 SP4 Microsoft Windows XP SP1 and SP2

Description The issue is related to a heap-based buffer overflow in the Server Service, allowing remote attackers to execute arbitrary code. This is achieved by sending crafted first-class Mailslot messages that trigger memory corruption and bypass size restrictions on second-class Mailslot messages. The vulnerability could allow an attacker to take complete control of the affected system.

Recommendations For Microsoft Windows 2000 SP4, apply the necessary patch to fix the heap-based buffer overflow in the Server Service. For Microsoft Windows XP SP1 and SP2, update to a newer service pack to resolve the issue. For Microsoft Windows Server 2003 up to SP1, apply the necessary patch or update to a newer service pack to fix the vulnerability. As a temporary workaround, consider restricting access to the Server Service to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-1314

Affected Products

Windows 2000

Windows Server 2003

Windows Xp

Windows

References · 20

• 🔥 https://exploit-db.com/exploits/2057 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-035 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1314 · Security Note
• http://tippingpoint.com/security/advisories/TSRT-06-02.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1314 · Security Note
• http://securityfocus.com/bid/18863 · Note
• http://osvdb.org/27154 · Note
• http://securityfocus.com/archive/1/439773/100/0/threaded · Note
• http://securityfocus.com/archive/1/archive/1/439773/100/0/threaded · Note
• http://xforce.iss.net/xforce/xfdb/26818 · Note
• http://kb.cert.org/vuls/id/189140 · Note
• http://securityreason.com/securityalert/1212 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-035 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:600 · Note
• http://vupen.com/english/advisories/2006/2753 · Note