PT-2006-2326 · Microsoft · Windows Server 2003+3

Mike Price + 2 · Published 2006-07-11 · Updated 2018-10-18 · CVE-2006-1315

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to Server 2003 SP2 Microsoft Windows 2000 SP4 Microsoft Windows XP SP1 and SP2

Description The issue allows remote attackers to obtain sensitive information via crafted requests that leak information in SMB buffers, which are not properly initialized. This is due to an information disclosure vulnerability in the Server service, which could allow an attacker to view fragments of memory used to store SMB traffic during transport.

Recommendations For Microsoft Windows 2000 SP4, consider applying the necessary security patches to resolve the issue. For Microsoft Windows XP SP1 and SP2, update to a newer service pack to mitigate the risk. For Microsoft Windows Server 2003 up to SP1, apply the security update or upgrade to Server 2003 SP2 or later. As a temporary workaround, consider restricting access to the Server service to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-1315

Affected Products

Windows

Windows 2000

Windows Server 2003

Windows Xp

References · 18

• 🔥 https://exploit-db.com/exploits/2057 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-035 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1315 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-1315 · Security Note
• http://kb.cert.org/vuls/id/333636 · Note
• http://securityfocus.com/archive/1/439881/100/0/threaded · Note
• http://osvdb.org/27155 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-035 · Note
• http://vupen.com/english/advisories/2006/2753 · Note
• http://frsirt.com/english/advisories/2006/2753 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26820 · Note
• http://securityfocus.com/bid/18891 · Note
• http://secunia.com/advisories/21007 · Note
• http://securitytracker.com/id?1016467 · Note