CVE-2006-1315 Information

Description

The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4 XP SP1 and SP2 Server 2003 up to SP1 and other products allows remote attackers to obtain sensitive information via crafted requests that leak information in SMB buffers which are not properly initialized aka \SMB Information Disclosure Vulnerability.\

Reference

http://secunia.com/advisories/21007 http://securitytracker.com/id?1016467 http://www.kb.cert.org/vuls/id/333636 http://www.osvdb.org/27155 http://www.securityfocus.com/archive/1/439881/100/0/threaded http://www.securityfocus.com/bid/18891 http://www.vupen.com/english/advisories/2006/2753 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-035 https://exchange.xforce.ibmcloud.com/vulnerabilities/26820 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A3