CVE-2006-2379

CVSS V2 High 9.3 CVSS V3 None
Description
Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.
Overview
  • CVE ID
  • CVE-2006-2379
  • Assigner
  • secure@microsoft.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2006-06-13T19:06:00
  • Last Modified Date
  • 2019-04-30T14:27:13
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:C/I:C/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 9.3
  • Severity
  • HIGH
  • Exploitability Score
  • 8.6
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://www.kb.cert.org/vuls/id/722753 Patch US Government Resource
http://www.securityfocus.com/bid/18374 Patch
http://secunia.com/advisories/20639 Patch Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA06-164A.html US Government Resource
http://securitytracker.com/id?1016290
http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/46702
http://www.osvdb.org/26433
http://www.vupen.com/english/advisories/2006/2329
https://exchange.xforce.ibmcloud.com/vulnerabilities/26834
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2018
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1787
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1776
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1712
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1585
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1483
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-032
http://www.securityfocus.com/archive/1/438609/100/0/threaded
http://www.securityfocus.com/archive/1/438482/100/0/threaded
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2006-2379
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2379
History
Created Old Value New Value Data Type Notes
2022-05-10 17:42:15 Added to TrackCVE