PT-2006-4788 · Microsoft · Windows Server 2003+4

Gerardo Richarte · Published 2006-07-31 · Updated 2018-10-17 · CVE-2006-3942

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows NT 4.0 Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003

Description A denial of service issue exists due to the way the Server service handles certain network messages. This can be exploited by sending a specially crafted network message, potentially causing the system to crash. The issue is related to the ExecuteTransaction function and the handling of SMB messages without null character termination, which can lead to a NULL dereference.

Recommendations For Microsoft Windows NT 4.0, consider disabling the Server service until a patch is available. For Microsoft Windows 2000, restrict access to the Server service to minimize the risk of exploitation. For Microsoft Windows XP, avoid using the Server service for critical operations until the issue is resolved. For Microsoft Windows Server 2003, consider implementing network message filtering to block specially crafted messages.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2006-3942

Affected Products

Windows 2000

Windows Nt 4.0

Windows Server 2003

Windows Xp

Windows

References · 27

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/smb/ms06_035_mailslot.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/smb/ms06_063_trans.rb · Exploit
• 🔥 https://exploit-db.com/exploits/2057 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3942 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-063 · Vendor Advisory
• http://vupen.com/english/advisories/2006/3037 · Vendor Advisory
• http://secunia.com/advisories/21276 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3942 · Security Note
• http://securityfocus.com/archive/1/449179/100/0/threaded · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27999 · Note
• http://securitytracker.com/id?1017035 · Note
• http://securitytracker.com/id?1016606 · Note
• http://milw0rm.com//exploits/2057 · Note
• http://coresecurity.com/common/showdoc.php?idx=562&idxseccion=10 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:428 · Note