[security-alerts] FW: [SA22341] Microsoft Windows Multiple IPv6 Denial of Service Vulnerabilities

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> TITLE:
> Microsoft Windows Multiple IPv6 Denial of Service Vulnerabilities
> 
> SECUNIA ADVISORY ID:
> SA22341
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/22341/
> 
> CRITICAL:
> Less critical
> 
> IMPACT:
> DoS
> 
> WHERE:
> From remote
> 
> OPERATING SYSTEM:
> Microsoft Windows XP Professional
> http://secunia.com/product/22/
> Microsoft Windows XP Home Edition
> http://secunia.com/product/16/
> Microsoft Windows Server 2003 Web Edition
> http://secunia.com/product/1176/
> Microsoft Windows Server 2003 Standard Edition
> http://secunia.com/product/1173/
> Microsoft Windows Server 2003 Enterprise Edition
> http://secunia.com/product/1174/
> Microsoft Windows Server 2003 Datacenter Edition
> http://secunia.com/product/1175/
> 
> DESCRIPTION:
> Three vulnerabilities have been reported in Microsoft Windows, which
> can be exploited by malicious people to cause a DoS (Denial of
> Service).
> 
> 1) A vulnerability exists in the IPv6 Windows implementation of ICMP
> which, if successfully exploited, results in the system dropping an
> existing connection.
> 
> 2) A vulnerability exists in the IPv6 Windows implementation of TCP
> which, if successfully exploited, results in the system dropping an
> existing TCP connection.
> 
> 3) A vulnerability exists in the IPv6 implementation of TCP/IP which,
> if successfully exploited, could cause the system to stop responding.
> 
> Successful exploitation of the vulnerabilities requires IPv6 to be
> configured (not enabled by default).
> 
> SOLUTION:
> Apply patches.
> 
> Microsoft Windows XP SP1/SP2:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=9fd73
> d12-ff7c-411d-944d-a6f147b20775
> 
> Microsoft Windows XP Professional x64 Edition:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=fc98f
> 55c-520e-4a68-a3c3-0df51c6122bb
> 
> Microsoft Windows Server 2003 (with or without SP1):
> http://www.microsoft.com/downloads/details.aspx?FamilyId=10259
> 1a0-2b58-497b-bc20-593571b96e9c
> 
> Microsoft Windows Server 2003 (Itanium, with or without SP1):
> http://www.microsoft.com/downloads/details.aspx?FamilyId=12515
> d47-134d-4d1f-9ae7-f0a7167ec424
> 
> Microsoft Windows Server 2003 x64 Edition:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=c5fab
> a34-48f5-4875-a0fa-6b8207f9b276
> 
> PROVIDED AND/OR DISCOVERED BY:
> Reported by the vendor.
> 
> ORIGINAL ADVISORY:
> MS06-064 (KB922819):
> http://www.microsoft.com/technet/security/Bulletin/MS06-064.mspx
> 
>