National Vulnerability Database (CVE-2006-0034)

National Cyber-Alert System Vulnerability Summary: CVE-2006-0034
Orirignal release date: 2006-05-09 Source: US-CERT/NIST ### Overview Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, aka the MSDTC Invalid Memory Access Vulnerability. ### Impact CVSS Severity: 7.0 (High) Range: remote Authentication: input buffer="1" Impact Type: avail,conf,int,sec_prot user="1" ### Reference to Advisories, Solutions, and Tools External Source: BUGTRAQ Name: 20060509 [EEYEB20051011A] - Microsoft Distributed Transaction Coordinator Heap Overflow Hyperlink: http://www.securityfocus.com/archive/1/archive/1/433430/100/0/threaded External Source: NSO Name: http://www.eeye.com/html/research/advisories/AD20060509a.html adv=1 patch=1 Hyperlink: http://www.eeye.com/html/research/advisories/AD20060509a.html adv=1 patch=1 External Source: MS Name: MS06-018 Hyperlink: http://www.microsoft.com/technet/security/bulletin/ms06-018.mspx External Source: BID Name: 17906 Hyperlink: http://www.securityfocus.com/bid/17906 External Source: FRSIRT Name: ADV-2006-1742 Hyperlink: http://www.frsirt.com/english/advisories/2006/1742 External Source: SECUNIA Name: 20000 Hyperlink: http://secunia.com/advisories/20000 External Source: BUGTRAQ Name: 20060511 Microsoft MSDTC NdrAllocate Validation Vulnerability Hyperlink: http://www.securityfocus.com/archive/1/archive/1/433677/100/0/threaded External Source: SECTRACK Name: 1016047 Hyperlink: http://securitytracker.com/id?1016047 External Source: FULLDISC Name: 20060509 [EEYEB20051011A] - Microsoft Distributed Transaction Coordinator Heap Overflow Hyperlink: http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0238.html External Source: FULLDISC Name: 20060510 Microsoft MSDTC NdrAllocate Validation Vulnerability Hyperlink: http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0269.html External Source: OSVDB Name: 25335 Hyperlink: http://www.osvdb.org/25335 External Source: OVAL Name: oval:org.mitre.oval:def:1222 Hyperlink: http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1222 External Source: OVAL Name: oval:org.mitre.oval:def:1477 Hyperlink: http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1477 External Source: OVAL Name: oval:org.mitre.oval:def:1908 Hyperlink: http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1908 ### Vulnerable Software and Vendor Windows NT (Microsoft) Windows 2000 (Microsoft) Windows Server 2003 (Microsoft) Microsoft Distributed Transaction Coordinator (Microsoft) Windows XP (Microsoft) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0034