vendor:
Windows XP
by:
milw0rm
9.3
CVSS
HIGH
MS Windows DHCP Client Broadcast Attack Exploit
119
CWE
Product Name: Windows XP
Affected Version From: Windows 2000
Affected Version To: Windows XP SP2
Patch Exists: YES
Related CWE: CVE-2006-2370
CPE: o:microsoft:windows_xp
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2006
MS Windows DHCP Client Broadcast Attack Exploit (MS06-036)
This exploit allows an attacker to send a malicious DHCP response packet to a vulnerable Windows client. The malicious packet contains a specially crafted DHCP option that contains a shellcode. The shellcode is executed with the privileges of the DHCP client service.
Mitigation:
Microsoft has released a patch to address this vulnerability.
