Skip to content
Fencer Vulns
medium 5.0

CVE-2006-3880 json

Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of serv…

published 2006-07-27 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-3874

cvss
5.0
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
24.7%
EPSS 24.7% chance of exploitation in 30 days, percentile 97%
public exploits
1
Exploit-DB

Summary

Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums and random numbers in certain TCP header fields, as demonstrated by the Achilles Windows Attack Tool. NOTE: the researcher reports that the Microsoft Security Response Center has stated "Our investigation which has included code review, review of the TCPDump, and attempts on reproing the issue on multiple fresh installs of various Windows Operating Systems have all resulted in non confirmation.

Timeline

  1. First public exploit (EDB-28263)
  2. Published

Exploit prediction

24.74% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-28263 Microsoft Windows XP/2000/2003 - Remote Denial of Service dos, 2006-07-24
  • securityfocus.com http://www.securityfocus.com/bid/19135 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.