Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages.

The remote host has a memory corruption vulnerability in the 'Server' service that could allow an attacker to perform a denial of service against the remote host.

The remote host is vulnerable to heap overflow in the 'Server' service that may allow an attacker to execute arbitrary code on the remote host with 'SYSTEM' privileges.

In addition to this, the remote host is also affected by an information disclosure vulnerability in SMB that may allow an attacker to obtain portions of the memory of the remote host.

The remote host is vulnerable to heap overflow in the 'Server' service that could allow an attacker to execute arbitrary code on the remote host with the 'System' privileges.

In addition to this, the remote host is also vulnerable to an information disclosure attack in SMB that could allow an attacker to obtain portions of the memory of the remote host.

ID	Name	Product	Family	Severity
22536	MS06-063: Vulnerability in Server Service Could Allow Denial of Service (923414)	Nessus	Windows : Microsoft Bulletins	high
22034	MS06-035: Vulnerability in Server Service Could Allow Remote Code Execution (917159) (uncredentialed check)	Nessus	Windows	high
22029	MS06-035: Vulnerability in Server Service Could Allow Remote Code Execution (917159)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2006-1314

critical

Tenable Plugins

high

high

high