Lucene search

[email protected]CVE-2006-3880

HistoryJul 27, 2006 - 1:04 a.m.

CVE-2006-3880

2006-07-2701:04:00

[email protected]

web.nvd.nist.gov

microsoft

windows

tcp

denial of service

vulnerability

security

nvd

cve-2006-3880

7.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.141 Low

EPSS

Percentile

95.7%

JSON

Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums and random numbers in certain TCP header fields, as demonstrated by the Achilles Windows Attack Tool. NOTE: the researcher reports that the Microsoft Security Response Center has stated "Our investigation which has included code review, review of the TCPDump, and attempts on reproing the issue on multiple fresh installs of various Windows Operating Systems have all resulted in non confirmation.

Affected configurations

NVD

Node

microsoftwindows_2000

microsoftwindows_2000sp1

microsoftwindows_2000sp2

microsoftwindows_2000sp3

microsoftwindows_2000sp4

microsoftwindows_2003_serverMatchdatacenter_edition

microsoftwindows_2003_serverMatchdatacenter_editionsp1

microsoftwindows_2003_serverMatchdatacenter_edition_64-bit

microsoftwindows_2003_serverMatchdatacenter_edition_64-bitsp1

microsoftwindows_2003_serverMatchenterprise_64-bit

microsoftwindows_2003_serverMatchenterprise_editionsp1

microsoftwindows_2003_serverMatchenterprise_edition_64-bit

microsoftwindows_2003_serverMatchr2datacenter_64-bit

microsoftwindows_2003_serverMatchsp1enterprise

microsoftwindows_2003_serverMatchstandard

microsoftwindows_2003_serverMatchstandardsp1

microsoftwindows_2003_serverMatchstandard_64-bit

microsoftwindows_2003_serverMatchweb

microsoftwindows_2003_serverMatchwebsp1

microsoftwindows_xp64-bit

microsoftwindows_xpembedded

microsoftwindows_xphome

microsoftwindows_xpmedia_center

microsoftwindows_xpgoldprofessional

microsoftwindows_xpsp164-bit

microsoftwindows_xpsp1embedded

microsoftwindows_xpsp1home

microsoftwindows_xpsp1media_center

microsoftwindows_xpsp2home

microsoftwindows_xpsp2media_center

microsoftwindows_xpsp2tablet_pc

CPENameOperatorVersion
microsoft:windows_2000microsoft windows 2000eq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqdatacenter_edition
microsoft:windows_2003_servermicrosoft windows 2003 servereqdatacenter_edition_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_edition
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_edition_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqr2
microsoft:windows_2003_servermicrosoft windows 2003 servereqsp1
microsoft:windows_2003_servermicrosoft windows 2003 servereqstandard
microsoft:windows_2003_servermicrosoft windows 2003 servereqstandard_64-bit

CPE	Name	Operator	Version
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	datacenter_edition
microsoft:windows_2003_server	microsoft windows 2003 server	eq	datacenter_edition_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_edition
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_edition_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	r2
microsoft:windows_2003_server	microsoft windows 2003 server	eq	sp1
microsoft:windows_2003_server	microsoft windows 2003 server	eq	standard
microsoft:windows_2003_server	microsoft windows 2003 server	eq	standard_64-bit

Rows per page:

1-10 of 121

References

securityreason.com/securityalert/1282

www.securityfocus.com/archive/1/441007/100/0/threaded

www.securityfocus.com/bid/19135

7.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.141 Low

EPSS

Percentile

95.7%

JSON

Related for CVE-2006-3880

nvd1 cvelist1