certfr_avis - certa-2006-avi-347

CERTA-2006-AVI-347

Vulnerability from certfr_avis

None

Description

Une vulnérabilité de nature non-précisée par l'éditeur est présente dans le noyau du système d'exploitation Windows 2000. Elle permet à un utilisateur local d'élever ses privilèges.

La mise à jour publiée le 08 août 2006 semble introduire quelques problèmes dont une vulnérabilité critique, pouvant permettre à un utilisateur local d'élever ses privilèges et prendre le contrôle du système vulnérable.

Solution

Se référer au dernier bulletin de sécurité de l'éditeur publié le 26 septembre 2006 pour l'obtention des correctifs (cf. section Documentation).

Windows 2000 Service Pack 4.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft MS06-049 du 8 août 2006	None	vendor-advisory
Bulletin de sécurité Microsoft MS06-049 du 09 août 2006 remis à jour le 26 septembre 2006 :	-	other
Bulletin de sécurité Microsoft MS06-049 du 09 août 2006 remis à jour le 26 septembre 2006 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eWindows 2000 Service Pack 4.\u003c/p\u003e",
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 de nature non-pr\u00e9cis\u00e9e par l\u0027\u00e9diteur est pr\u00e9sente dans\nle noyau du syst\u00e8me d\u0027exploitation Windows 2000. Elle permet \u00e0 un\nutilisateur local d\u0027\u00e9lever ses privil\u00e8ges.\n\nLa mise \u00e0 jour publi\u00e9e le 08 ao\u00fbt 2006 semble introduire quelques\nprobl\u00e8mes dont une vuln\u00e9rabilit\u00e9 critique, pouvant permettre \u00e0 un\nutilisateur local d\u0027\u00e9lever ses privil\u00e8ges et prendre le contr\u00f4le du\nsyst\u00e8me vuln\u00e9rable.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au dernier bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur publi\u00e9 le 26\nseptembre 2006 pour l\u0027obtention des correctifs (cf. section\nDocumentation).\n",
  "cves": [
    {
      "name": "CVE-2006-3444",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3444"
    }
  ],
  "initial_release_date": "2006-08-09T00:00:00",
  "last_revision_date": "2006-09-28T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS06-049 du 09 ao\u00fbt 2006    remis \u00e0 jour le 26 septembre 2006 :",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS06-aug.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS06-049 du 09 ao\u00fbt 2006    remis \u00e0 jour le 26 septembre 2006 :",
      "url": "http://www.microsoft.com/france/technet/security/Bulletin/MS06-049.mspx"
    }
  ],
  "reference": "CERTA-2006-AVI-347",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-08-09T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence CVE et de la nouvelle mise \u00e0 jour du bulletin MS06-049.",
      "revision_date": "2006-09-28T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9 du noyau de Windows 2000",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS06-049 du 8 ao\u00fbt 2006",
      "url": null
    }
  ]
}

CVE-2006-3444 (GCVE-0-2006-3444)

Vulnerability from cvelistv5

Published

2006-08-09 00:00

Modified

2024-08-07 18:30

Severity ?

CWE

Summary

Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges via unspecified vectors involving an "unchecked buffer."

References

URL

Tags

	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-049	vendor-advisory, x_refsource_MS
	http://securitytracker.com/id?1016658	vdb-entry, x_refsource_SECTRACK
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A673	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2006/3215	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/21415	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/19388	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:30:33.569Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "MS06-049",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-049"
          },
          {
            "name": "1016658",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016658"
          },
          {
            "name": "oval:org.mitre.oval:def:673",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A673"
          },
          {
            "name": "ADV-2006-3215",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3215"
          },
          {
            "name": "21415",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21415"
          },
          {
            "name": "19388",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19388"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges via unspecified vectors involving an \"unchecked buffer.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-12T19:57:01",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "MS06-049",
          "tags": [
            "vendor-advisory",
            "x_refsource_MS"
          ],
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-049"
        },
        {
          "name": "1016658",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016658"
        },
        {
          "name": "oval:org.mitre.oval:def:673",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A673"
        },
        {
          "name": "ADV-2006-3215",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3215"
        },
        {
          "name": "21415",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21415"
        },
        {
          "name": "19388",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19388"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2006-3444",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges via unspecified vectors involving an \"unchecked buffer.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "MS06-049",
              "refsource": "MS",
              "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-049"
            },
            {
              "name": "1016658",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016658"
            },
            {
              "name": "oval:org.mitre.oval:def:673",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A673"
            },
            {
              "name": "ADV-2006-3215",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3215"
            },
            {
              "name": "21415",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21415"
            },
            {
              "name": "19388",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19388"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2006-3444",
    "datePublished": "2006-08-09T00:00:00",
    "dateReserved": "2006-07-07T00:00:00",
    "dateUpdated": "2024-08-07T18:30:33.569Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTA-2006-AVI-347

Vulnerability from certfr_avis

Description

Solution

CVE-2006-3444 (GCVE-0-2006-3444)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature