PT-2006-4731 · Microsoft · Windows 2000+3

J. Oquendo · Published 2006-07-27 · Updated 2024-08-07 · CVE-2006-3880

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows NT 4.0 Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Small Business Server 2003

Description The issue allows remote attackers to cause a denial of service, specifically an IP stack hang, by sending a continuous stream of packets on TCP port 135 with incorrect TCP header checksums and random numbers in certain TCP header fields. This can be demonstrated using the Achilles Windows Attack Tool. However, Microsoft's investigation, which included code review and attempts to reproduce the issue on multiple fresh installs of various Windows Operating Systems, did not confirm the issue.

Recommendations For Microsoft Windows NT 4.0, consider restricting access to TCP port 135 as a temporary workaround. For Microsoft Windows 2000, consider restricting access to TCP port 135 as a temporary workaround. For Microsoft Windows XP, consider restricting access to TCP port 135 as a temporary workaround. For Microsoft Windows Small Business Server 2003, consider restricting access to TCP port 135 as a temporary workaround. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-3880

Affected Products

Windows 2000

Windows Nt 4.0

Windows Small Business Server 2003

Windows Xp

References · 5

• 🔥 https://exploit-db.com/exploits/28263 · Exploit
• 🔥 http://securityfocus.com/bid/19135 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3880 · Security Note
• http://securityreason.com/securityalert/1282 · Note
• http://securityfocus.com/archive/1/441007/100/0/threaded · Note