CVE-2006-3942

Published Jul 31, 2006

Last updated 6 years ago

Overview

Description: The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the ExecuteTransaction function, possibly related to an "SMB PIPE," aka the "Mailslot DOS" vulnerability. NOTE: the name "Mailslot DOS" was derived from incomplete initial research; the vulnerability is not associated with a mailslot.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.8
Impact score: 6.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:C

Weaknesses

nvd@nist.gov: CWE-20

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "330B6798-5380-44AD-9B52-DF5955FA832C"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0808041A-CE1A-433A-9C2B-019097CCFB0C"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4E7FD818-322D-4089-A644-360C33943D29"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "644E2E89-F3E3-4383-B460-424D724EE62F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "91D6D065-A28D-49DA-B7F4-38421FF86498"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References