Microsoft WINS Buffer Overflow in Name Value Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1012517
|
|
SecurityTracker URL: http://securitytracker.com/id?1012517
|
|
CVE Reference: CAN-2004-0567
(Links to External Site)
|
Date: Dec 14 2004
|
Impact: Execution of arbitrary code via network, Root access via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): NT 4.0 SP6a, 2000 SP4, 2003; and prior service packs
|
Description: A vulnerability was reported in Microsoft Windows Internet Naming Service (WINS). A remote user can execute arbitrary code on the target system.
The vendor reported that a remote user can send a WINS packet with a specially crafted Name value to trigger a buffer overflow and
execute arbitrary code with System level privileges.
Microsoft credits Kostya Kortchinsky from CERT RENATER with reporting this
vulnerability.
|
Impact: A remote user can execute arbitrary code on the target system with System level privileges.
|
Solution: The vendor has released the following fixes.
Microsoft Windows NT Server 4.0 Service Pack 6a:
http://www.microsoft.com/downloads/details.aspx?FamilyId=38E9DB8C-5C43-
4E9A-9DC9-97C2686A45F1
Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6:
http://www.microsoft.com/downloads/details.aspx?FamilyId=D7AB3F6F-26F
E-4AE8-A07A-481D772D03A6
Microsoft Windows 2000 Server Service Pack 3 and Microsoft Windows 2000 Server Service Pack 4:
http://www.microsoft.com/downloads/details.a
spx?FamilyId=40146B52-5546-489E-857E-01FE1EF709B2
Microsoft Windows Server 2003:
http://www.microsoft.com/downloads/details.aspx?FamilyId=10836F38-A38B-47D5-B87B-18
D8E26EEFAA
Microsoft Windows Server 2003 64-Bit Edition:
http://www.microsoft.com/downloads/details.aspx?FamilyId=06CF9E85-C66D-4A7D-B2EB-99DE9423B60F
A
restart is required in most cases.
|
Vendor URL: www.microsoft.com/technet/security/bulletin/ms04-045.mspx (Links to External Site)
|
Cause: Boundary error
|
Underlying OS: Windows (NT), Windows (2000), Windows (2003)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Tue, 14 Dec 2004 09:20:34 -0500
Subject: http://www.microsoft.com/technet/security/bulletin/ms04-045.mspx
|
http://www.microsoft.com/technet/security/bulletin/ms04-045.mspx
|
|
