PT-2006-3338 · Microsoft · Server Message Block+1

Rubã©N Santamarta · Published 2006-06-13 · Updated 2024-02-15 · CVE-2006-2374

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to XP SP3 and Server 2003 SP2

Description The issue is related to a denial of service vulnerability in the Server Message Block (SMB) driver. It allows local users to cause a system hang by calling the MrxSmbCscIoctlCloseForCopyChunk function with the file handle of the shadow device, resulting in a deadlock. This could allow an attacker to cause an affected system to stop responding.

Recommendations For Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to the MrxSmbCscIoctlCloseForCopyChunk function to minimize the risk of exploitation.

Exploit

Fix

DoS

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2006-2374

Affected Products

Windows

Server Message Block

References · 27

• 🔥 http://securityfocus.com/bid/18357 · Exploit
• 🔥 https://exploit-db.com/exploits/1911 · Exploit
• 🔥 https://exploit-db.com/exploits/28001 · Exploit
• http://vupen.com/english/advisories/2006/2327 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2374 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2374 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1850 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26830 · Note
• http://xforce.iss.net/xforce/xfdb/26830 · Note
• http://frsirt.com/english/advisories/2006/2327 · Note
• http://osvdb.org/26439 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1827 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1827 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1979 · Note