CVE-2006-6385

Published: Dec 8, 2006Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in Intel PRO 10/100, PRO/1000, and PRO/10GbE PCI, PCI-X, and PCIe network adapter drivers (aka NDIS miniport drivers) before 20061205 allows local users to execute arbitrary code with "kernel-level" privileges via an incorrect function call in certain OID handlers.

Affected (8)

Products: Intel: Pro 1000 Adapters, Pro 1000 Pcie Adapters, Pro 10 100 Adapters, Pro 10gbe Adapters

4 products

Pro 1000 Adapters

Pro 1000 Pcie Adapters

Pro 10 100 Adapters

Pro 10gbe Adapters

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Intel Pro 1000 Adapters	version ≤ 7.2.7
Intel Pro 1000 Adapters	version ≤ 8.7.1.0
Intel Pro 1000 Adapters	version ≤ 9.0.15
Intel Pro 1000 Pcie Adapters	version ≤ 9.1.30.0
Intel Pro 10 100 Adapters	version ≤ 3.5.14
Intel Pro 10 100 Adapters	version ≤ 4.0.3
Intel Pro 10 100 Adapters	version ≤ 8.0.27.0
Intel Pro 10gbe Adapters	version ≤ 1.0.109

References (26)

http://lists.freebsd.org/pipermail/freebsd-security/2006-December/004186.html

Source: cve@mitre.org

http://research.eeye.com/html/advisories/published/AD20061207.html

Source: cve@mitre.org

http://research.eeye.com/html/advisories/upcoming/20060710.html

Source: cve@mitre.org

http://secunia.com/advisories/23221

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/2007

Source: cve@mitre.org

http://securitytracker.com/id?1017346

Source: cve@mitre.org

http://www.fujitsu.com/global/support/software/security/products-f/primergy-200701e.html

Source: cve@mitre.org

http://www.intel.com/support/network/sb/CS-023726.htm

Source: cve@mitre.org

Patch

http://www.kb.cert.org/vuls/id/296681

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/archive/1/453852/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21456

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4871

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30750

Source: cve@mitre.org

http://lists.freebsd.org/pipermail/freebsd-security/2006-December/004186.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://research.eeye.com/html/advisories/published/AD20061207.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://research.eeye.com/html/advisories/upcoming/20060710.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23221

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/2007

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1017346

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.fujitsu.com/global/support/software/security/products-f/primergy-200701e.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.intel.com/support/network/sb/CS-023726.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.kb.cert.org/vuls/id/296681

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.securityfocus.com/archive/1/453852/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/21456

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/4871

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/30750

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.