Published: 09/08/2006 Updated: 12/10/2018

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Subscribe to Windows 2003 Server

Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote malicious users to execute arbitrary code via a crafted record response. NOTE: while MS06-041 implies that there is a single issue, there are multiple vectors, and likely multiple vulnerabilities, related to (1) a heap-based buffer overflow in a DNS server response to the client, (2) a DNS server response with malformed ATMA records, and (3) a length miscalculation in TXT, HINFO, X25, and ISDN records.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows 2003 server sp1
microsoft windows xp
microsoft windows 2000
microsoft windows 2003 server 64-bit

#!/usr/bin/python #POC for MS06-041 #Run the python script passing the local ip address as parameter The DNS server #will start listening on this ip address for DNS hostname resolution queries #This script is for testing and educational purpose and so to test this one will #have to point the DNS resolver on the target/client to the ip address on ...

NVD-CWE-Other http://www.us-cert.gov/cas/techalerts/TA06-220A.html http://www.kb.cert.org/vuls/id/794580 http://www.securityfocus.com/bid/19404 http://securitytracker.com/id?1016653 http://secunia.com/advisories/21394 http://www.osvdb.org/27844 http://xforce.iss.net/xforce/alerts/id/233 http://xforce.iss.net/xforce/alerts/id/234 http://xforce.iss.net/xforce/alerts/id/235 http://www.vupen.com/english/advisories/2006/3211 https://exchange.xforce.ibmcloud.com/vulnerabilities/28240 https://exchange.xforce.ibmcloud.com/vulnerabilities/28013 https://exchange.xforce.ibmcloud.com/vulnerabilities/24586 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A723 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-041 https://nvd.nist.gov https://www.exploit-db.com/exploits/2900/https://www.kb.cert.org/vuls/id/794580

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-3441

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect