CVE Vulnerabilities

CVE-2006-3880

Published: Jul 27, 2006 | Modified: Apr 11, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums and random numbers in certain TCP header fields, as demonstrated by the Achilles Windows Attack Tool. NOTE: the researcher reports that the Microsoft Security Response Center has stated Our investigation which has included code review, review of the TCPDump, and attempts on reproing the issue on multiple fresh installs of various Windows Operating Systems have all resulted in non confirmation.

Affected Software

Name Vendor Start Version End Version
Windows_2000 Microsoft * *
Windows_2003_server Microsoft datacenter_edition (including) datacenter_edition (including)
Windows_2003_server Microsoft datacenter_edition-sp1 (including) datacenter_edition-sp1 (including)
Windows_2003_server Microsoft datacenter_edition_64-bit (including) datacenter_edition_64-bit (including)
Windows_2003_server Microsoft datacenter_edition_64-bit-sp1 (including) datacenter_edition_64-bit-sp1 (including)
Windows_2003_server Microsoft enterprise_64-bit (including) enterprise_64-bit (including)
Windows_2003_server Microsoft enterprise_edition-sp1 (including) enterprise_edition-sp1 (including)
Windows_2003_server Microsoft enterprise_edition_64-bit (including) enterprise_edition_64-bit (including)
Windows_2003_server Microsoft r2 (including) r2 (including)
Windows_2003_server Microsoft sp1 (including) sp1 (including)
Windows_2003_server Microsoft standard (including) standard (including)
Windows_2003_server Microsoft standard-sp1 (including) standard-sp1 (including)
Windows_2003_server Microsoft standard_64-bit (including) standard_64-bit (including)
Windows_2003_server Microsoft web (including) web (including)
Windows_2003_server Microsoft web-sp1 (including) web-sp1 (including)
Windows_xp Microsoft * *

References