CVEvulnerability
CVE-2006-3439
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-08-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314.
Affected configurations
• microsoft windows 2000
• microsoft windows 2003 server 64-bit
• microsoft windows 2003 server itanium
• microsoft windows 2003 server r2
• microsoft windows 2003 server sp1
• microsoft windows xp
References
- http://secunia.com/advisories/21388 Patch, Vendor Advisory
- http://securitytracker.com/id?1016667 securitytracker.com
- http://www.cisco.com/en/US/products/ps6120/tsd_products_security_response09186a008070c75a.html www.cisco.com
- http://www.dhs.gov/dhspublic/display?content=5789 www.dhs.gov
- http://www.kb.cert.org/vuls/id/650769 Patch, US Government Resource
- http://www.securityfocus.com/bid/19409 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA06-220A.html Patch, US Government Resource
- http://www.vupen.com/english/advisories/2006/3210 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-040 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28002 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A492 oval.cisecurity.org
- http://secunia.com/advisories/21388 Patch, Vendor Advisory
- http://securitytracker.com/id?1016667 securitytracker.com
- http://www.cisco.com/en/US/products/ps6120/tsd_products_security_response09186a008070c75a.html www.cisco.com
- http://www.dhs.gov/dhspublic/display?content=5789 www.dhs.gov
- http://www.kb.cert.org/vuls/id/650769 Patch, US Government Resource
- http://www.securityfocus.com/bid/19409 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA06-220A.html Patch, US Government Resource
- http://www.vupen.com/english/advisories/2006/3210 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-040 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28002 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A492 oval.cisecurity.org