Executive Summary
Informations | |||
---|---|---|---|
Name | CVE-2006-1315 | First vendor Publication | 2006-07-11 |
Vendor | Cve | Last vendor Modification | 2018-10-18 |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N) | |||
---|---|---|---|
Cvss Base Score | 5 | Attack Range | Network |
Cvss Impact Score | 2.9 | Attack Complexity | Low |
Cvss Expoit Score | 10 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to obtain sensitive information via crafted requests that leak information in SMB buffers, which are not properly initialized, aka "SMB Information Disclosure Vulnerability." |
Original Source
Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1315 |
OVAL Definitions
Definition Id: oval:org.mitre.oval:def:3 | |||
Oval ID: | oval:org.mitre.oval:def:3 | ||
Title: | SMB Information Disclosure Vulnerability | ||
Description: | The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to obtain sensitive information via crafted requests that leak information in SMB buffers, which are not properly initialized, aka "SMB Information Disclosure Vulnerability." | ||
Family: | windows | Class: | vulnerability |
Reference(s): | CVE-2006-1315 | Version: | 3 |
Platform(s): | Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 | Product(s): | |
Definition Synopsis: | |||
|
CPE : Common Platform Enumeration
Type | Description | Count |
---|---|---|
Application | 1 |
ExploitDB Exploits
id | Description |
---|---|
2006-07-21 | MS Windows - Mailslot Ring0 Memory Corruption Exploit (MS06-035) |
Open Source Vulnerability Database (OSVDB)
Id | Description |
---|---|
27155 | Microsoft Windows Server Service SRV.SYS Crafted Request SMB Information Disc... Windows contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the Server service reuses memory without zeroing it out, which can disclose random information in memory resulting in a loss of confidentiality. |
Snort® IPS/IDS
Date | Description |
---|---|
2014-01-10 | SMB Trans unicode andx mailslot heap overflow attempt RuleID : 7046 - Revision : 9 - Type : NETBIOS-DG |
2014-01-10 | SMB Trans andx mailslot heap overflow attempt RuleID : 7045 - Revision : 9 - Type : NETBIOS-DG |
2014-01-10 | SMB-DS Trans unicode andx mailslot heap overflow attempt RuleID : 7044 - Revision : 9 - Type : NETBIOS |
2014-01-10 | SMB-DS Trans andx mailslot heap overflow attempt RuleID : 7043 - Revision : 9 - Type : NETBIOS |
2014-01-10 | Microsoft Windows SMB Trans unicode andx mailslot heap overflow attempt RuleID : 7042 - Revision : 15 - Type : OS-WINDOWS |
2014-01-10 | Microsoft Windows SMB Trans andx mailslot heap overflow attempt RuleID : 7041 - Revision : 14 - Type : OS-WINDOWS |
2014-01-10 | Microsoft Windows SMB Trans unicode andx mailslot heap overflow attempt RuleID : 7040 - Revision : 17 - Type : OS-WINDOWS |
2014-01-10 | Microsoft Windows SMB Trans andx mailslot heap overflow attempt RuleID : 7039 - Revision : 16 - Type : OS-WINDOWS |
2014-01-10 | Microsoft Windows SMB Trans unicode mailslot heap overflow attempt RuleID : 7038 - Revision : 14 - Type : OS-WINDOWS |
2014-01-10 | Microsoft Windows SMB Trans mailslot heap overflow attempt RuleID : 7037 - Revision : 13 - Type : OS-WINDOWS |
2014-01-10 | Microsoft Windows SMB Trans unicode mailslot heap overflow attempt RuleID : 7036 - Revision : 17 - Type : OS-WINDOWS |
2014-01-10 | Microsoft Windows SMB Trans mailslot heap overflow attempt RuleID : 7035 - Revision : 14 - Type : OS-WINDOWS |
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2006-10-10 | Name : It is possible to crash the remote host due to a flaw in the 'server' service. File : smb_nt_ms06-063.nasl - Type : ACT_GATHER_INFO |
2006-07-12 | Name : Arbitrary code can be executed on the remote host due to a flaw in the 'Serve... File : smb_kb917159.nasl - Type : ACT_GATHER_INFO |
2006-07-11 | Name : Arbitrary code can be executed on the remote host due to a flaw in the 'serve... File : smb_nt_ms06-035.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
Date | Informations |
---|---|
2021-05-04 12:03:48 |
|
2021-04-22 01:04:22 |
|
2020-05-23 00:17:32 |
|
2018-10-18 21:20:02 |
|
2018-10-13 00:22:33 |
|
2017-10-11 09:23:39 |
|
2017-07-20 09:23:26 |
|
2016-06-28 15:40:45 |
|
2016-04-26 14:25:06 |
|
2014-02-17 10:35:07 |
|
2013-05-11 10:51:48 |
|