National Cyber-Alert System

Vulnerability Summary for CVE-2006-1184

Overview

Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability. NOTE: this is a variant of CVE-2005-2119.

Impact

CVSS Severity (version 2.0 upgrade from v1.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 17905

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/17905

External Source: BUGTRAQ

Name: 20060509 [EEYEB20051011B] - Microsoft Distributed Transaction Coordinator Denial of Service

Type: Patch Information

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/433425/100/0/threaded

External Source: MS

Name: MS06-018

Type: Patch Information

Hyperlink:http://www.microsoft.com/technet/security/bulletin/ms06-018.mspx

External Source: VUPEN

Name: ADV-2006-1742

Type: Advisory; Patch Information

Hyperlink:http://www.frsirt.com/english/advisories/2006/1742

External Source: MISC

Name: http://www.eeye.com/html/research/advisories/AD20060509b.html

Type: Advisory; Patch Information

Hyperlink:http://www.eeye.com/html/research/advisories/AD20060509b.html

External Source: SECUNIA

Name: 20000

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/20000

External Source: XF

Name: msdtc-message-dos(25558)

Hyperlink:http://xforce.iss.net/xforce/xfdb/25558

External Source: OSVDB

Name: 25336

Hyperlink:http://www.osvdb.org/25336

External Source: SECTRACK

Name: 1016047

Hyperlink:http://securitytracker.com/id?1016047

External Source: SREASON

Name: 864

Hyperlink:http://securityreason.com/securityalert/864

US Government Resource: oval:org.mitre.oval:def:1990

Name: oval:org.mitre.oval:def:1990

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1990

US Government Resource: oval:org.mitre.oval:def:1912

Name: oval:org.mitre.oval:def:1912

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1912

US Government Resource: oval:org.mitre.oval:def:1779

Name: oval:org.mitre.oval:def:1779

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1779

US Government Resource: oval:org.mitre.oval:def:1295

Name: oval:org.mitre.oval:def:1295

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1295