CVE-2006-3439

Published: Aug 9, 2006Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314.

Affected (9)

Products: Microsoft: Windows 2000, Windows 2003 Server, Windows Xp

3 products

Windows 2003 Server

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2003 Server	Version 64-bit
Microsoft Windows 2003 Server	Version itanium
Microsoft Windows 2003 Server	Version r2
Microsoft Windows 2003 Server	Version sp1
Microsoft Windows 2003 Server	Version sp1
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

References (22)

http://secunia.com/advisories/21388

Source: secure@microsoft.com

PatchVendor Advisory

http://securitytracker.com/id?1016667

Source: secure@microsoft.com

http://www.cisco.com/en/US/products/ps6120/tsd_products_security_response09186a008070c75a.html

Source: secure@microsoft.com

http://www.dhs.gov/dhspublic/display?content=5789

Source: secure@microsoft.com

http://www.kb.cert.org/vuls/id/650769

Source: secure@microsoft.com

PatchUS Government Resource

http://www.securityfocus.com/bid/19409

Source: secure@microsoft.com

http://www.us-cert.gov/cas/techalerts/TA06-220A.html

Source: secure@microsoft.com

PatchUS Government Resource

http://www.vupen.com/english/advisories/2006/3210

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-040

Source: secure@microsoft.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/28002

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A492

Source: secure@microsoft.com

http://secunia.com/advisories/21388

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://securitytracker.com/id?1016667

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cisco.com/en/US/products/ps6120/tsd_products_security_response09186a008070c75a.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.dhs.gov/dhspublic/display?content=5789

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/650769

Source: af854a3a-2127-422b-91ae-364da2661108

PatchUS Government Resource

http://www.securityfocus.com/bid/19409

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA06-220A.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchUS Government Resource

http://www.vupen.com/english/advisories/2006/3210

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-040

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/28002

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A492

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.