Content
(MS06-064) Microsoft ICMP Connection Reset Vulnerability (922819)
- Type
- Logic error
- Impact of exploitation
- Denial of Service
- User Interaction
- no user interaction is needed
- Attack Vector
- Malicious remote network traffic
- Rating
- Medium
- CVE reference
- CVE-2004-0790,
- Vendor Status
- Responded and patched
- Vulnerable systems
- Windows XP SP0 - SP2,
- Windows XP Generic,
- Windows 2003 Generic,
- Windows 2003 SP0 - SP1,
- Summary
- A denial of service is present in Microsoft Windows processing of TCP/IP IPV6 traffic. This may be exploited when processing malicious network traffic.
Tab Navigation
Description
TCP-IP IPv6 is the next progression from the IPv4 protocol for network communications. A flaw is present in Microsoft Windows processing of TCP/IP IPv6 traffic that may allow for a remote denial of service attack. The flaw lies in processing of certain ICMP messages. Successful exploitation could cause any current TCP connections to be reset.
McAfee Product Mitigation & Recommendations
Recommendations
Download and install the patch available from Microsoft(922819): http://www.microsoft.com/technet/security/Bulletin/MS06-064.mspx
McAfee Product Mitigation
McAfee Foundstone
This Foundstone vulnerability check can be used to assess if your systems are vulnerable and is expected to accurately identify if a system is vulnerable in many enterprise environments.
- Signature:
- (MS06-064) Microsoft ICMP Connection Reset Vulnerability (922819)
- Signature identifier:
- 4679
- Release date:
- 10/10/2006
Additional Resources
Microsoft Security Bulletin: Vulnerability in TCP-IP IPv6 Could Result in Denial of Service (922819)
http://www.microsoft.com/technet/security/Bulletin/MS06-064.mspx
Vulnerability Summary CVE-2004-0790
All Information
Timeline -
10/10/2006
Vendor has provided a patch.
10/28/2005
Vulnerability information has been publicly disclosed.
Description -
TCP-IP IPv6 is the next progression from the IPv4 protocol for network communications. A flaw is present in Microsoft Windows processing of TCP/IP IPv6 traffic that may allow for a remote denial of service attack. The flaw lies in processing of certain ICMP messages. Successful exploitation could cause any current TCP connections to be reset.
McAfee Product Mitigation & Recommendations
Recommendations -
Download and install the patch available from Microsoft(922819): http://www.microsoft.com/technet/security/Bulletin/MS06-064.mspx
McAfee Product Mitigation
McAfee Foundstone
This Foundstone vulnerability check can be used to assess if your systems are vulnerable and is expected to accurately identify if a system is vulnerable in many enterprise environments.
- Signature:
- (MS06-064) Microsoft ICMP Connection Reset Vulnerability (922819)
- Signature identifier:
- 4679
- Release date:
- 10/10/2006
Additional Resources
Additional Resources -
Microsoft Security Bulletin: Vulnerability in TCP-IP IPv6 Could Result in Denial of Service (922819)
http://www.microsoft.com/technet/security/Bulletin/MS06-064.mspx
