CVE-2006-2379

Sažetak

Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.

Reference

http://secunia.com/advisories/20639
http://securitytracker.com/id?1016290
http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/46702
http://www.kb.cert.org/vuls/id/722753
http://www.osvdb.org/26433
http://www.securityfocus.com/archive/1/438482/100/0/threaded
http://www.securityfocus.com/archive/1/438609/100/0/threaded
http://www.securityfocus.com/bid/18374
http://www.us-cert.gov/cas/techalerts/TA06-164A.html
http://www.vupen.com/english/advisories/2006/2329
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-032
https://exchange.xforce.ibmcloud.com/vulnerabilities/26834
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1483
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1585
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1712
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1776
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1787
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2018

CVSS

Base:	9.3
Impact:	10.0
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:M/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

30-04-2019 - 14:27

Objavljeno

13-06-2006 - 19:06