CVE-2006-6385

Published: Dec 8, 2006Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in Intel PRO 10/100, PRO/1000, and PRO/10GbE PCI, PCI-X, and PCIe network adapter drivers (aka NDIS miniport drivers) before 20061205 allows local users to execute arbitrary code with "kernel-level" privileges via an incorrect function call in certain OID handlers.

Affected (8)

Products: Intel: Pro 1000 Adapters, Pro 1000 Pcie Adapters, Pro 10 100 Adapters, Pro 10gbe Adapters

4 products

Pro 1000 Adapters

Pro 1000 Pcie Adapters

Pro 10 100 Adapters

Pro 10gbe Adapters

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Intel Pro 1000 Adapters	Up to 7.2.7
Intel Pro 1000 Adapters	Up to 8.7.1.0
Intel Pro 1000 Adapters	Up to 9.0.15
Intel Pro 1000 Pcie Adapters	Up to 9.1.30.0
Intel Pro 10 100 Adapters	Up to 3.5.14
Intel Pro 10 100 Adapters	Up to 4.0.3
Intel Pro 10 100 Adapters	Up to 8.0.27.0
Intel Pro 10gbe Adapters	Up to 1.0.109

References (26)

http://lists.freebsd.org/pipermail/freebsd-security/2006-December/004186.html

Source: cve@mitre.org

http://research.eeye.com/html/advisories/published/AD20061207.html

Source: cve@mitre.org

http://research.eeye.com/html/advisories/upcoming/20060710.html

Source: cve@mitre.org

http://secunia.com/advisories/23221

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/2007

Source: cve@mitre.org

http://securitytracker.com/id?1017346

Source: cve@mitre.org

http://www.fujitsu.com/global/support/software/security/products-f/primergy-200701e.html

Source: cve@mitre.org

http://www.intel.com/support/network/sb/CS-023726.htm

Source: cve@mitre.org

Patch

http://www.kb.cert.org/vuls/id/296681

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/archive/1/453852/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21456

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4871

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30750

Source: cve@mitre.org

http://lists.freebsd.org/pipermail/freebsd-security/2006-December/004186.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://research.eeye.com/html/advisories/published/AD20061207.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://research.eeye.com/html/advisories/upcoming/20060710.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23221

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/2007

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1017346

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.fujitsu.com/global/support/software/security/products-f/primergy-200701e.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.intel.com/support/network/sb/CS-023726.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.kb.cert.org/vuls/id/296681

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.securityfocus.com/archive/1/453852/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/21456

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/4871

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/30750

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.