CVE-2006-5614
Microsoft Windows NAT Helper Components - Denial of Service via Malformed DNS Query
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-5614.
PoCs published by x82, h07, MC, including Metasploit module auxiliary/dos/windows/nat/nat_helper.
AI-analyzed exploit summary This exploit targets a denial-of-service (DoS) vulnerability in Microsoft Windows NAT Helper Components by sending a malformed DNS packet to port 53. The payload triggers a crash due to an invalid field (0x0000) in the DNS query.
Description
Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet Connection Sharing is enabled, allows remote attackers to cause a denial of service (svchost.exe crash) via a malformed DNS query, which results in a null pointer dereference.
Exploits (3)
This exploit targets a denial-of-service (DoS) vulnerability in Microsoft Windows NAT Helper Components by sending a malformed DNS packet to port 53. The payload triggers a crash due to an invalid field (0x0000) in the DNS query.
This exploit targets a vulnerability in Microsoft Windows NAT Helper Components (ipnathlp.dll) by sending a malformed DNS query to trigger a DoS condition. The crafted packet causes an access violation in the ipnathlp module, leading to a crash.
This Metasploit module exploits a denial of service vulnerability in the Windows XP Internet Connection Sharing service by sending a malformed UDP packet to port 53. The packet structure triggers a crash in the NAT Helper service, leading to service disruption.