Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2006-3880

Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums and random numbers in certain TCP header fields, as demonstrated by the Achilles Windows Attack Tool. NOTE: the researcher reports that the Microsoft Security Response Center has stated "Our investigation which has included code review, review of the TCPDump, and attempts on reproing the issue on multiple fresh installs of various Windows Operating Systems have all resulted in non confirmation.

  • Published: Jul 27, 2006
  • Updated: Nov 8, 2023
  • CVE: CVE-2006-3880
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:N/A:P

No CWE or OWASP classifications available.

Software From Fixed in
microsoft / windows_2003_server datacenter_edition_64-bit-sp1 datacenter_edition_64-bit-sp1.x
microsoft / windows_2003_server standard standard.x
microsoft / windows_xp - -
microsoft / windows_2003_server web web.x
microsoft / windows_2003_server datacenter_edition_64-bit datacenter_edition_64-bit.x
microsoft / windows_2003_server enterprise_64-bit enterprise_64-bit.x
microsoft / windows_2000 - -
microsoft / windows_2003_server standard_64-bit standard_64-bit.x
microsoft / windows_2003_server enterprise_edition_64-bit enterprise_edition_64-bit.x
microsoft / windows_2003_server r2 r2.x
microsoft / windows_2003_server web-sp1 web-sp1.x
microsoft / windows_2003_server sp1 sp1.x
microsoft / windows_2003_server enterprise_edition-sp1 enterprise_edition-sp1.x
microsoft / windows_2003_server standard-sp1 standard-sp1.x
microsoft / windows_2003_server datacenter_edition datacenter_edition.x
microsoft / windows_2003_server datacenter_edition-sp1 datacenter_edition-sp1.x