Executive Summary

Informations
Name	CVE-2006-2379	First vendor Publication	2006-06-13
Vendor	Cve	Last vendor Modification	2011-03-07

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2379

CWE : Common Weakness Enumeration

id	Name
CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

OVAL Definitions

 

Definition Id: oval:org.mitre.oval:def:2018
Oval ID:	oval:org.mitre.oval:def:2018
Title:	IP Source Route Vulnerability (S03,SP1)
Description:	Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2006-2379	Version:	6
Platform(s):	Microsoft Windows Server 2003	Product(s):
Definition Synopsis:
Windows Server 2003 is installed AND Win2K/XP/2003/Vista service pack 1 is installed AND the version of Tcpip.sys is less than 5.2.3790.2709

 

Definition Id: oval:org.mitre.oval:def:1787
Oval ID:	oval:org.mitre.oval:def:1787
Title:	IP Source Route Vulnerability (Win2K)
Description:	Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2006-2379	Version:	7
Platform(s):	Microsoft Windows 2000	Product(s):
Definition Synopsis:
Windows 2000 Service Pack 4 (or later) is installed Windows 2000 is installed AND Win2K/XP/2003 service pack 4 (or later) is installed AND the version of Tcpip.sys is less than 5.0.2195.7087

 

Definition Id: oval:org.mitre.oval:def:1776
Oval ID:	oval:org.mitre.oval:def:1776
Title:	IP Source Route Vulnerability (WinS03)
Description:	Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2006-2379	Version:	7
Platform(s):	Microsoft Windows Server 2003	Product(s):
Definition Synopsis:
Windows Server 2003 is installed AND NOT Win2K/XP/2003 is patched AND the version of Tcpip.sys is less than 5.2.3790.537

 

Definition Id: oval:org.mitre.oval:def:1712
Oval ID:	oval:org.mitre.oval:def:1712
Title:	IP Source Route Vulnerability (64-bit XP)
Description:	Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2006-2379	Version:	6
Platform(s):	Microsoft Windows XP	Product(s):
Definition Synopsis:
Windows XP is installed AND Win2K/XP/2003/Vista service pack 1 is installed AND a version of Windows for the ia64 architecture is installed AND the version of Tcpip.sys is less than 5.2.3790.2709

 

Definition Id: oval:org.mitre.oval:def:1585
Oval ID:	oval:org.mitre.oval:def:1585
Title:	IP Source Route Vulnerability (XP,SP2)
Description:	Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2006-2379	Version:	7
Platform(s):	Microsoft Windows XP	Product(s):
Definition Synopsis:
Windows XP is installed AND Win2K/XP/2003/Vista/2008 service pack 2 is installed AND the version of Tcpip.sys is less than 5.1.2600.2892

 

Definition Id: oval:org.mitre.oval:def:1483
Oval ID:	oval:org.mitre.oval:def:1483
Title:	IP Source Route Vulnerability (XP,SP1)
Description:	Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2006-2379	Version:	6
Platform(s):	Microsoft Windows XP	Product(s):
Definition Synopsis:
Windows XP is installed AND Win2K/XP/2003/Vista service pack 1 is installed AND NOT a version of Windows for the ia64 architecture is installed AND the version of Tcpip.sys is less than 5.1.2600.1831

CPE : Common Platform Enumeration

Type	Description	Count
Os	Microsoft Windows 2000 cpe:/o:microsoft:windows_2000::sp1:datacenter_server cpe:/o:microsoft:windows_2000::sp3:advanced_server cpe:/o:microsoft:windows_2000:::server cpe:/o:microsoft:windows_2000::sp4:datacenter_server cpe:/o:microsoft:windows_2000::sp1:advanced_server cpe:/o:microsoft:windows_2000::sp2:datacenter_server cpe:/o:microsoft:windows_2000::sp2:server cpe:/o:microsoft:windows_2000::sp1:server cpe:/o:microsoft:windows_2000::sp3:professional cpe:/o:microsoft:windows_2000::sp1:professional cpe:/o:microsoft:windows_2000:::datacenter_server cpe:/o:microsoft:windows_2000::sp4:server cpe:/o:microsoft:windows_2000:::advanced_server cpe:/o:microsoft:windows_2000::sp3:server cpe:/o:microsoft:windows_2000:::professional cpe:/o:microsoft:windows_2000::sp2:professional cpe:/o:microsoft:windows_2000::sp3:datacenter_server cpe:/o:microsoft:windows_2000::sp2:advanced_server cpe:/o:microsoft:windows_2000::sp4:professional cpe:/o:microsoft:windows_2000::sp4:advanced_server	20
Os	Microsoft Windows 2003 Server cpe:/o:microsoft:windows_2003_server:web:sp1 cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_2003_server:standard_64-bit cpe:/o:microsoft:windows_2003_server:standard:sp1 cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:r2:sp1 cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit:sp1 cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise:sp1 cpe:/o:microsoft:windows_2003_server:datacenter_64-bit:sp1	13
Os	Microsoft Windows Nt cpe:/o:microsoft:windows_nt:4.0:sp1:enterprise_server cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0:sp3:workstation cpe:/o:microsoft:windows_nt:4.0:sp4:server cpe:/o:microsoft:windows_nt:4.0:sp5:workstation cpe:/o:microsoft:windows_nt:4.0:sp3:terminal_server cpe:/o:microsoft:windows_nt:4.0::server cpe:/o:microsoft:windows_nt:4.0:sp1:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp1:server cpe:/o:microsoft:windows_nt:4.0:sp6:server cpe:/o:microsoft:windows_nt:4.0:sp5:server cpe:/o:microsoft:windows_nt:4.0::workstation cpe:/o:microsoft:windows_nt:4.0:sp4:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp5:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp3:server cpe:/o:microsoft:windows_nt:4.0:sp6:workstation cpe:/o:microsoft:windows_nt:4.0:sp4:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp2:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp2:server cpe:/o:microsoft:windows_nt:4.0:sp2:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp3:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6a:server cpe:/o:microsoft:windows_nt:4.0:sp2:workstation cpe:/o:microsoft:windows_nt:4.0:sp6:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp5:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6a:workstation cpe:/o:microsoft:windows_nt:4.0:sp4:workstation cpe:/o:microsoft:windows_nt:4.0:sp6a:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp1:workstation cpe:/o:microsoft:windows_nt:4.0:sp6a:enterprise_server cpe:/o:microsoft:windows_nt:4.0::enterprise_server	32
Os	Microsoft Windows Xp cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:media_center cpe:/o:microsoft:windows_xp::sp2:tablet_pc cpe:/o:microsoft:windows_xp::sp2:media_center cpe:/o:microsoft:windows_xp::sp2:home cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp:::media_center cpe:/o:microsoft:windows_xp::sp1:home	9

Open Source Vulnerability Database (OSVDB)

id	Description
26433	Microsoft Windows TCP/IP Protocol Driver Source Routing Overflow

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/18374
BUGTRAQ	http://www.securityfocus.com/archive/1/archive/1/438482/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/438609/100/0/threaded
CERT	http://www.us-cert.gov/cas/techalerts/TA06-164A.html
CERT-VN	http://www.kb.cert.org/vuls/id/722753
FULLDISC	http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/46702
MS	http://www.microsoft.com/technet/security/bulletin/ms06-032.mspx
OSVDB	http://www.osvdb.org/26433
SECTRACK	http://securitytracker.com/id?1016290
SECUNIA	http://secunia.com/advisories/20639
VUPEN	http://www.vupen.com/english/advisories/2006/2329
XF	http://xforce.iss.net/xforce/xfdb/26834

Alert History

Date	Informations
2013-05-11 10:57:05	Multiple Updates