{"vuid":"VU#333636","idnumber":"333636","name":"Microsoft Server Service may disclose information used to store SMB traffic","keywords":["Microsoft","Server","Service","information disclosure","SMB traffic","ms06-jul"],"overview":"A vulnerability in the Microsoft Server service may allow an attacker to view fragments of memory used to store SMB traffic.","clean_desc":"Microsoft Server Service\nThe Microsoft Server service supports file, print, and named-pipe sharing over the network. Server Message Block\nServer Message Block (SMB) is a protocol used to share files and printers, and is the default file and print sharing service on supported versions of the Windows operating system. There is an uninitialized buffer in the Server driver that may allow an attacker to view contents of the SMB buffers.","impact":"This vulnerability may result in information being disclosed that would aid in launching other attacks on the affected system. An attacker could not exploit this vulnerability to run arbitrary code. Note that per Microsoft, other protocols such as internetwork packet exchange (IPX) and sequenced packet exchange (SPX) could also be vulnerable to this issue.","resolution":"Apply a Patch from the Vendor Apply the patch supplied by Microsoft. See Microsoft Security Bulletin MS06-035 for details.","workarounds":"Restrict Access\nPer Microsoft, restricting access to ports 139/tcp and 445/tcp to trusted hosts may prevent this vulnerability from being exploited.","sysaffected":"","thanks":"Microsoft Security reported this issue. Microsoft credits\n Mike Price and Rafal Wojtczuk of McAfee Avert Labs with reporting information about this issue to them.","author":"This document was written by Ryan Giobbi.","public":["h","t","t","p",":","/","/","w","w","w",".","m","i","c","r","o","s","o","f","t",".","c","o","m","/","t","e","c","h","n","e","t","/","s","e","c","u","r","i","t","y","/","b","u","l","l","e","t","i","n","/","m","s","0","6","-","0","3","5",".","m","s","p","x"],"cveids":["CVE-2006-1315"],"certadvisory":"","uscerttechnicalalert":null,"datecreated":"2006-07-11T18:06:03Z","publicdate":"2006-07-11T00:00:00Z","datefirstpublished":"2006-07-20T13:43:06Z","dateupdated":"2006-07-20T15:21:41Z","revision":16,"vrda_d1_directreport":"0","vrda_d1_population":"3","vrda_d1_impact":"3","cam_widelyknown":"17","cam_exploitation":"1","cam_internetinfrastructure":"1","cam_population":"4","cam_impact":"2","cam_easeofexploitation":"17","cam_attackeraccessrequired":"8","cam_scorecurrent":"0.3876","cam_scorecurrentwidelyknown":"0.4488","cam_scorecurrentwidelyknownexploited":"0.8364","ipprotocol":"","cvss_accessvector":"","cvss_accesscomplexity":"","cvss_authentication":null,"cvss_confidentialityimpact":"","cvss_integrityimpact":"","cvss_availabilityimpact":"","cvss_exploitablity":null,"cvss_remediationlevel":"","cvss_reportconfidence":"","cvss_collateraldamagepotential":"","cvss_targetdistribution":"","cvss_securityrequirementscr":"","cvss_securityrequirementsir":"","cvss_securityrequirementsar":"","cvss_basescore":"","cvss_basevector":"","cvss_temporalscore":"","cvss_environmentalscore":"","cvss_environmentalvector":"","metric":0.3876,"vulnote":null}