Lucene search

[email protected]CVE-2006-3440

HistoryAug 09, 2006 - 1:04 a.m.

CVE-2006-3440

2006-08-0901:04:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-3440

buffer overflow

winsock api

windows

remote code execution

vulnerability

8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.904 High

EPSS

Percentile

98.8%

JSON

Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka “Winsock Hostname Vulnerability.”

CPENameOperatorVersion
microsoft:windows_2003_servermicrosoft windows 2003 servereq64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqsp1
microsoft:windows_xpmicrosoft windows xpeq*
microsoft:windows_2000microsoft windows 2000eq*

CPE	Name	Operator	Version
microsoft:windows_2003_server	microsoft windows 2003 server	eq	64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	sp1
microsoft:windows_xp	microsoft windows xp	eq	*
microsoft:windows_2000	microsoft windows 2000	eq	*

References

secunia.com/advisories/21394

securitytracker.com/id?1016653

www.kb.cert.org/vuls/id/908276

www.securityfocus.com/bid/19319

www.us-cert.gov/cas/techalerts/TA06-220A.html

www.vupen.com/english/advisories/2006/3211

docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-041

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A747

8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.904 High

EPSS

Percentile

98.8%

JSON

Related for CVE-2006-3440

cert1 securityvulns1 nessus1