CVE-2006-6385
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
30.8%
Stack-based buffer overflow in Intel PRO 10/100, PRO/1000, and PRO/10GbE PCI, PCI-X, and PCIe network adapter drivers (aka NDIS miniport drivers) before 20061205 allows local users to execute arbitrary code with “kernel-level” privileges via an incorrect function call in certain OID handlers.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| intel | pro_10_100_adapters | * | cpe:2.3:h:intel:pro_10_100_adapters:*:*:*:*:*:*:*:* |
| intel | pro_1000_adapters | * | cpe:2.3:h:intel:pro_1000_adapters:*:*:*:*:*:*:*:* |
| intel | pro_1000_pcie_adapters | * | cpe:2.3:h:intel:pro_1000_pcie_adapters:*:*:*:*:*:*:*:* |
| intel | pro_10gbe_adapters | * | cpe:2.3:h:intel:pro_10gbe_adapters:*:*:*:*:*:*:*:* |
References
lists.freebsd.org/pipermail/freebsd-security/2006-December/004186.html
research.eeye.com/html/advisories/published/AD20061207.html
research.eeye.com/html/advisories/upcoming/20060710.html
secunia.com/advisories/23221
securityreason.com/securityalert/2007
securitytracker.com/id?1017346
www.fujitsu.com/global/support/software/security/products-f/primergy-200701e.html
www.intel.com/support/network/sb/CS-023726.htm
www.kb.cert.org/vuls/id/296681
www.securityfocus.com/archive/1/453852/100/0/threaded
www.securityfocus.com/bid/21456
www.vupen.com/english/advisories/2006/4871
exchange.xforce.ibmcloud.com/vulnerabilities/30750
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
30.8%