Executive Summary

Informations
Name	CVE-2006-3444	First vendor Publication	2006-08-08
Vendor	Cve	Last vendor Modification	2011-03-07

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Security Protection

Impacts

Provides user account access : Allows partial confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges via unspecified vectors involving an "unchecked buffer."

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3444

OVAL Definitions

 

Definition Id: oval:org.mitre.oval:def:673
Oval ID:	oval:org.mitre.oval:def:673
Title:	Windows 2000 Kernel Elevation of Privilege Vulnerability
Description:	Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges via unspecified vectors involving an "unchecked buffer."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2006-3444	Version:	3
Platform(s):	Microsoft Windows 2000	Product(s):
Definition Synopsis:
Microsoft Windows 2000 SP4 or later is installed AND The version of Ntoskrnl.exe is less than 5.0.2195.7098.

CPE : Common Platform Enumeration

Type	Description	Count
Os	Microsoft Windows 2000 cpe:/o:microsoft:windows_2000::sp4:datacenter_server cpe:/o:microsoft:windows_2000::sp4::fr cpe:/o:microsoft:windows_2000::sp4:server cpe:/o:microsoft:windows_2000::sp4:professional cpe:/o:microsoft:windows_2000::sp4:advanced_server	5

ExploitDB Exploits

id	Description
2006-09-21	MS Windows (Windows Kernel) Privilege Escalation Exploit (MS06-049)

Open Source Vulnerability Database (OSVDB)

id	Description
27848	Microsoft Windows Kernel Unspecified Local Privilege Escalation

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/19388
MS	http://www.microsoft.com/technet/security/Bulletin/MS06-049.mspx
SECTRACK	http://securitytracker.com/id?1016658
SECUNIA	http://secunia.com/advisories/21415
VUPEN	http://www.vupen.com/english/advisories/2006/3215

Alert History

Date	Informations
2013-05-11 11:02:26	Multiple Updates