CVE-2006-0376

Windows 2000, Windows XP, and Windows Server 2003 - Unauthenticated Wireless Association Without User Warning

Title source: llm
STIX 2.1

Description

The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user when (1) it establishes an association with a station in ad hoc (aka peer-to-peer) mode or (2) a station in ad hoc mode establishes an association with it, which allows remote attackers to put unexpected wireless communication into place.

References (7)

Core 7
Core References
Various Sources x_refsource_misc
http://www.theta44.org/karma/
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015489
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/349
Vendor Advisory x_refsource_misc
http://www.nmrc.org/pub/advise/20060114.txt
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/24157
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/421868/100/0/threaded

Scores

EPSS 0.1825
EPSS Percentile 96.9%

Details

Status published
Products (3)
microsoft/windows_2000 (3 CPE variants)
microsoft/windows_2003_server r2
microsoft/windows_xp (2 CPE variants)
Published Jan 22, 2006
Tracked Since Feb 18, 2026