CVE-2006-0376: High severity Microsoft Windows XP vulnerability

Published Jan 22, 2006

Updated

The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user when (1) it establishes an association with a station in ad hoc (aka peer-to-peer) mode or (2) a station in ad hoc mode establishes an association with it, which allows remote attackers to put unexpected wireless communication into place.

Affected Software

6 affected components

Microsoft Windows XP=gold

Microsoft Windows 2000=sp2

Microsoft Windows 2003 Server=r2

Microsoft Windows 2000=sp4

Microsoft Windows 2000=sp3

Event History

Jan 22, 2006

CVE Published

08:03 PM

Jan 23, 2006

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-0376?

CVE-2006-0376 is considered to have a medium severity due to its potential to allow unauthorized network access.

How do I fix CVE-2006-0376?

To mitigate CVE-2006-0376, users should ensure they are using updated software and consider disabling ad hoc mode in their wireless settings.

Which systems are affected by CVE-2006-0376?

CVE-2006-0376 affects multiple Microsoft operating systems including Windows 2000, Windows XP, and Windows Server 2003.

What is the nature of the vulnerability in CVE-2006-0376?

CVE-2006-0376 allows for silent associations with untrusted devices in ad hoc mode, posing a risk of network impersonation.

Is CVE-2006-0376 still a concern today?

While CVE-2006-0376 is an older vulnerability, it may still pose a risk to legacy systems that have not been updated.