PT-2006-3341 · Microsoft · Windows 2000+3

Andrey Minaev · Published 2006-06-13 · Updated 2019-04-30 · CVE-2006-2379

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1

Description A buffer overflow issue exists in the TCP/IP Protocol driver, allowing remote attackers to execute arbitrary code via unknown vectors related to IP source routing.

Recommendations For Microsoft Windows 2000, apply the patch or update to at least SP4. For Microsoft Windows XP, apply the patch or update to at least SP3. For Microsoft Windows Server 2003, apply the patch or update to at least SP2. As a temporary workaround, consider restricting IP source routing to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2006-2379

Affected Products

Tcp/Ip Protocol Driver

Windows 2000

Windows Server 2003

Windows Xp

References · 20

• 🔥 https://exploit-db.com/exploits/1967 · Exploit
• http://secunia.com/advisories/20639 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-032 · Vendor Advisory
• http://kb.cert.org/vuls/id/722753 · Patch
• http://securityfocus.com/bid/18374 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-2379 · Security Note
• http://securitytracker.com/id?1016290 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1712 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1787 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26834 · Note
• http://osvdb.org/26433 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2018 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1585 · Note
• http://securityfocus.com/archive/1/438609/100/0/threaded · Note
• http://us-cert.gov/cas/techalerts/TA06-164A.html · Note