CVE-2006-2374
The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle…
Does this matter?
Lower severity and a low EPSS score (1.75%). Track it; it rarely justifies an emergency change on its own.
Description
The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the "SMB Invalid Handle Vulnerability."
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 1.75% probability · 77th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-667
- Affected
- microsoft/windows 2000 · microsoft/windows 2003 server · microsoft/windows xp
- Source
- secure@microsoft.com
References
- http://secunia.com/advisories/20635Broken Link, Third Party Advisory
- http://securitytracker.com/id?1016288Broken Link, Third Party Advisory, VDB Entry
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=409Not Applicable
- http://www.osvdb.org/26439Broken Link
- http://www.securityfocus.com/bid/18357Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/2327Broken Link, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26830Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1827Broken Link, Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1841Broken Link, Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1850Broken Link, Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1979Broken Link, Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2030Broken Link, Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2060Broken Link, Third Party Advisory
- http://secunia.com/advisories/20635Broken Link, Third Party Advisory
- http://securitytracker.com/id?1016288Broken Link, Third Party Advisory, VDB Entry
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=409Not Applicable
- http://www.osvdb.org/26439Broken Link
- http://www.securityfocus.com/bid/18357Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/2327Broken Link, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26830Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1827Broken Link, Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1841Broken Link, Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1850Broken Link, Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1979Broken Link, Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2030Broken Link, Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2060Broken Link, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.