Microsoft Windows IGMPv3 Denial of Service Vulnerability

Bugtraq ID:	16645
Class:	Design Error
CVE:	CVE-2006-0021
Remote:	Yes
Local:	No
Published:	Feb 14 2006 12:00AM
Updated:	Oct 25 2007 02:26AM
Credit:	Douglas Nascimento of Datacom is credited with the discovery of this vulnerability. This issue was disclosed in the referenced vendor advisory.
Vulnerable:	Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Media Center Edition SP1 Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP2 Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP Gold 0 Microsoft Windows XP Embedded SP1 Microsoft Windows XP Embedded Microsoft Windows XP 64-bit Edition Version 2003 SP1 Microsoft Windows XP 64-bit Edition Version 2003 Microsoft Windows XP 64-bit Edition SP1 Microsoft Windows XP 64-bit Edition Microsoft Windows XP 0 Microsoft Windows Server 2003 Web Edition SP1 Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Standard x64 Edition Microsoft Windows Server 2003 Standard Edition SP1 Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Enterprise x64 Edition Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition SP1 Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Datacenter x64 Edition Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Datacenter Edition SP1 Microsoft Windows Server 2003 Datacenter Edition
Not Vulnerable:

Microsoft Windows IGMPv3 Denial of Service Vulnerability

A vulnerability in the handling of IGMPv3 (Internet Group Management Protocol) packets could result in a denial of service.

An attacker can exploit this issue through a broadcast attack to cause vulnerable computers on the subnet to become unresponsive, effectively denying service to legitimate users.

Microsoft Windows IGMPv3 Denial of Service Vulnerability

An exploit is not required.

Proof-of-concept code is available.

• /data/vulnerabilities/exploits/MS_IGMP_DOS.c

Microsoft Windows IGMPv3 Denial of Service Vulnerability

Solution:
Microsoft has released security advisory MS06-007 with fixes to address this issue.


Microsoft Windows Server 2003 Datacenter Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=78D7DF14-6049 -4318-89CA-9C8681CED8AB&displaylang=en

Microsoft Windows Server 2003 Datacenter x64 Edition

• Microsoft Security Update for Windows Server x64 Edition (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=12AAE69E-C5C3 -4E4A-9970-F5DB84DD9744&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=78D7DF14-6049 -4318-89CA-9C8681CED8AB&displaylang=en

Microsoft Windows XP Media Center Edition SP2

• Microsoft Security Update for Windows XP (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BB21D74-C37B -472B-BB10-71D4680680A7&displaylang=en

Microsoft Windows Server 2003 Datacenter Edition

• Microsoft Security Update for Windows Server 2003 (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=78D7DF14-6049 -4318-89CA-9C8681CED8AB&displaylang=en

Microsoft Windows XP Tablet PC Edition SP1

• Microsoft Security Update for Windows XP (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BB21D74-C37B -472B-BB10-71D4680680A7&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition

• Microsoft Security Update for Windows Server 2003 (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=78D7DF14-6049 -4318-89CA-9C8681CED8AB&displaylang=en

Microsoft Windows XP Home SP2

• Microsoft Security Update for Windows XP (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BB21D74-C37B -472B-BB10-71D4680680A7&displaylang=en

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Security Update for Windows XP (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BB21D74-C37B -472B-BB10-71D4680680A7&displaylang=en

Microsoft Windows XP Media Center Edition SP1

• Microsoft Security Update for Windows XP (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BB21D74-C37B -472B-BB10-71D4680680A7&displaylang=en

Microsoft Windows Server 2003 Web Edition

• Microsoft Security Update for Windows Server 2003 (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=78D7DF14-6049 -4318-89CA-9C8681CED8AB&displaylang=en

Microsoft Windows XP Home

• Microsoft Security Update for Windows XP (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BB21D74-C37B -472B-BB10-71D4680680A7&displaylang=en

Microsoft Windows XP Home SP1

• Microsoft Security Update for Windows XP (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BB21D74-C37B -472B-BB10-71D4680680A7&displaylang=en

Microsoft Windows XP Professional x64 Edition

• Microsoft Security Update for Windows XP x64 Edition (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=8E2538CC-CC90 -4DB7-8D0B-0B8BA4234E67&displaylang=en

Microsoft Windows XP Media Center Edition

• Microsoft Security Update for Windows XP (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BB21D74-C37B -472B-BB10-71D4680680A7&displaylang=en

Microsoft Windows Server 2003 Web Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=78D7DF14-6049 -4318-89CA-9C8681CED8AB&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition Itanium 0

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=9AE276CF-AB46 -4198-BCB3-3EFFDF15550E&displaylang=en

Microsoft Windows Server 2003 Standard Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=78D7DF14-6049 -4318-89CA-9C8681CED8AB&displaylang=en

Microsoft Windows Server 2003 Standard Edition

• Microsoft Security Update for Windows Server 2003 (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=78D7DF14-6049 -4318-89CA-9C8681CED8AB&displaylang=en

Microsoft Windows XP Professional SP2

• Microsoft Security Update for Windows XP (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BB21D74-C37B -472B-BB10-71D4680680A7&displaylang=en

Microsoft Windows Server 2003 Datacenter Edition Itanium SP1

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=9AE276CF-AB46 -4198-BCB3-3EFFDF15550E&displaylang=en

Microsoft Windows Server 2003 Standard x64 Edition

• Microsoft Security Update for Windows Server x64 Edition (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=12AAE69E-C5C3 -4E4A-9970-F5DB84DD9744&displaylang=en

Microsoft Windows XP Professional

• Microsoft Security Update for Windows XP (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BB21D74-C37B -472B-BB10-71D4680680A7&displaylang=en

Microsoft Windows Server 2003 Enterprise x64 Edition

• Microsoft Security Update for Windows Server x64 Edition (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=12AAE69E-C5C3 -4E4A-9970-F5DB84DD9744&displaylang=en

Microsoft Windows XP Tablet PC Edition

• Microsoft Security Update for Windows XP (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BB21D74-C37B -472B-BB10-71D4680680A7&displaylang=en

Microsoft Windows XP Professional SP1

• Microsoft Security Update for Windows XP (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BB21D74-C37B -472B-BB10-71D4680680A7&displaylang=en

Microsoft Windows XP 0

• Microsoft Security Update for Windows XP (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BB21D74-C37B -472B-BB10-71D4680680A7&displaylang=en

Microsoft Windows Server 2003 Datacenter Edition Itanium 0

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB913446)
  http://www.microsoft.com/downloads/details.aspx?familyid=9AE276CF-AB46 -4198-BCB3-3EFFDF15550E&displaylang=en

Microsoft Windows IGMPv3 Denial of Service Vulnerability

References:

• Microsoft Security Bulletin MS06-007 - Vulnerability in TCP/IP Could Allow Denia (Microsoft)
  
• Vendor Home Page (Microsoft)
  
• SYMSA-2007-012: Microsoft Windows CE IGMP Denial of Service ([email protected])