CVE-2006-1364

Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service (resource consumption or crash) by repeatedly requesting each of several documents that refer to COM components, or are restricted documents located under the ASP.NET application path.

CVSS v3.0 7.5 HIGH
CVSS v2.0 7.8 HIGH

7.5^/10

CVSS v3.0 : HIGH

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://hackingspirits.com/vuln-rnd/w3wp-remote-dos.zip	Broken Link Third Party Advisory
http://www.securiteam.com/windowsntfocus/5KP0O0KI0Y.html	Exploit Third Party Advisory
http://www.securityfocus.com/bid/17188	Exploit Third Party Advisory VDB Entry
http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044292.html	Third Party Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044291.html	Third Party Advisory
http://securitytracker.com/id?1015825	Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/25392	Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/1601	Exploit Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/428622/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:asp.net:1.1:sp1::::::
	cpe:2.3:a:microsoft:asp.net::::::::

Information

Published : 2006-03-23 03:06

Updated : 2018-10-18 09:32

NVD link : CVE-2006-1364

Mitre link : CVE-2006-1364

JSON object : View

CWE

CWE-400

Uncontrolled Resource Consumption

Advertisement

Products Affected

microsoft

asp.net

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://hackingspirits.com/vuln-rnd/w3wp-remote-dos.zip", "name": "http://hackingspirits.com/vuln-rnd/w3wp-remote-dos.zip", "tags": ["Broken Link", "Third Party Advisory"], "refsource": "MISC"}, {"url": "http://www.securiteam.com/windowsntfocus/5KP0O0KI0Y.html", "name": "http://www.securiteam.com/windowsntfocus/5KP0O0KI0Y.html", "tags": ["Exploit", "Third Party Advisory"], "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/17188", "name": "17188", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044292.html", "name": "20060322 w3wp remote DoS", "tags": ["Third Party Advisory"], "refsource": "FULLDISC"}, {"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044291.html", "name": "20060322 w3wp remote DoS due to improper reference of STA COM components in ASP.NET", "tags": ["Third Party Advisory"], "refsource": "FULLDISC"}, {"url": "http://securitytracker.com/id?1015825", "name": "1015825", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "SECTRACK"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25392", "name": "ms-aspnet-w3wp-dos(25392)", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "XF"}, {"url": "https://www.exploit-db.com/exploits/1601", "name": "1601", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "refsource": "EXPLOIT-DB"}, {"url": "http://www.securityfocus.com/archive/1/428622/100/0/threaded", "name": "20060322 w3wp remote DoS", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service (resource consumption or crash) by repeatedly requesting each of several documents that refer to COM components, or are restricted documents located under the ASP.NET application path."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-400"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-1364", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "severity": "HIGH", "impactScore": 6.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}}, "publishedDate": "2006-03-23T11:06Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:microsoft:asp.net:1.1:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "1.1"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-18T16:32Z"}