Microsoft Windows 2000/XP Network Connectivity netman.dll denial of service
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
4.8 | $0-$5k | 0.00 |
A vulnerability, which was classified as problematic, was found in Microsoft Windows 2000/XP (Operating System). This affects some unknown processing in the library netman.dll of the component Network Connectivity Handler. The manipulation with an unknown input leads to a denial of service vulnerability. CWE is classifying the issue as CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. This is going to have an impact on availability. The summary by CVE is:
netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Connections Service crash) via a large integer argument to a particular function, aka "Network Connection Manager Vulnerability."
The bug was discovered 07/14/2005. The weakness was presented 07/14/2005 by bkbll as MS05-045 (Website). It is possible to read the advisory at support.avaya.com. This vulnerability is uniquely identified as CVE-2005-2307 since 07/19/2005. Access to the local network is required for this attack to succeed. No form of authentication is needed for exploitation. Technical details and a public exploit are known.
After immediately, there has been an exploit disclosed. The exploit is shared for download at frsirt.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 1974 days. During that time the estimated underground price was around $5k-$25k. The vulnerability scanner Nessus provides a plugin with the ID 19998 (MS05-045: Vulnerability in Network Connection Manager Could Allow Denial of Service (905414)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Windows : Microsoft Bulletins and running in the context l.
Upgrading eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at windowsupdate.microsoft.com. The best possible mitigation is suggested to be upgrading to the latest version. A possible mitigation has been published 4 months after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at X-Force (21355), Tenable (19998) and Exploit-DB (1104). See 1702, 1789, 1793 and 1792 for similar entries.
Product
Type
Vendor
Name
Version
License
Support
- end of life (old version)
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.3VulDB Meta Temp Score: 4.8
VulDB Base Score: 5.3
VulDB Temp Score: 4.8
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Denial of serviceCWE: CWE-404
ATT&CK: Unknown
Local: No
Remote: Partially
Availability: 🔍
Access: Public
Status: Proof-of-Concept
Download: 🔍
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 19998
Nessus Name: MS05-045: Vulnerability in Network Connection Manager Could Allow Denial of Service (905414)
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
Exploit-DB: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Exploit Delay Time: 🔍
Patch: windowsupdate.microsoft.com
Timeline
02/17/2000 🔍07/14/2005 🔍
07/14/2005 🔍
07/14/2005 🔍
07/14/2005 🔍
07/14/2005 🔍
07/14/2005 🔍
07/14/2005 🔍
07/15/2005 🔍
07/19/2005 🔍
07/19/2005 🔍
10/11/2005 🔍
10/11/2005 🔍
10/11/2005 🔍
10/16/2005 🔍
07/03/2019 🔍
Sources
Vendor: microsoft.comProduct: microsoft.com
Advisory: MS05-045
Researcher: bkbll
Status: Confirmed
Confirmation: 🔍
CVE: CVE-2005-2307 (🔍)
OVAL: 🔍
X-Force: 21355
SecurityTracker: 1015043
Vulnerability Center: 9406 - [MS05-045] Windows NCM Remote Denial of Service via Buffer Overflow, Medium
SecurityFocus: 14260 - Microsoft Windows Network Connections Manager Library Local Denial of Service Vulnerability
Secunia: 16065 - Microsoft Windows Network Connections Service Denial of Service, Not Critical
OSVDB: 17885 - Microsoft Windows Network Connections Service netman.dll Remote DoS
scip Labs: https://www.scip.ch/en/?labs.20161013
See also: 🔍
Entry
Created: 07/15/2005 16:18Updated: 07/03/2019 16:40
Changes: 07/15/2005 16:18 (94), 07/03/2019 16:40 (8)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.