Microsoft Windows Remote Desktop Protocol Bug Lets Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1014498
|
|
SecurityTracker URL: http://securitytracker.com/id?1014498
|
|
CVE Reference: CAN-2005-1218
(Links to External Site)
|
Updated: Aug 9 2005
|
Original Entry Date: Jul 16 2005
|
Impact: Denial of service via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Advisory: Microsoft Security Bulletin
|
Version(s): XP SP2, 2000 SP4, 2003 SP1; and prior service packs
|
Description: A vulnerability was reported in Microsoft Windows in the Remote Desktop Protocol (RDP) implementation. A remote user can cause denial of service conditions.
A remote user can send specially crafted RDP packet to cause the target system to hang or crash.
Systems with RDP enabled (not
the default except on Windows XP Media Center Edition) are affected.
The vendor credits Tom Ferris of Security Protocols with
reporting this vulnerability.
|
Impact: A remote user can cause denial of service conditions on the target system.
|
Solution: The vendor has issued the following fixes:
Microsoft Windows 2000 Server Service Pack 4:
http://www.microsoft.com/downloads/details.aspx?FamilyId=18255896-8C5D-45C5-
8840-C0C6EE1B14BB
Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?FamilyId=A229F193-DA3
F-4014-925D-1EACF5BA296C
Microsoft Windows XP Professional x64 Edition:
http://www.microsoft.com/downloads/details.aspx?FamilyId=79AD267F-1A2E-4597-AFD6-53369F0DD8B
7
Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?FamilyId=EFD642EF-95E2-4A99-8FFD-6
032D86282A2
Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based
Systems:
http://www.microsoft.com/downloads/details.aspx?FamilyId=E5342572-C494-489D-A69E-290070EBFF1C
Microsoft Windows Server
2003 x64 Edition:
http://www.microsoft.com/downloads/details.aspx?FamilyId=F3DBA966-0F24-4129-9B55-2144E7F9D5DA
A restart
is required.
|
Vendor URL: www.microsoft.com/technet/security/Bulletin/MS05-041.mspx (Links to External Site)
|
Cause: Input validation error
|
Underlying OS: Windows (2000), Windows (2003), Windows (XP)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Sat, 16 Jul 2005 17:14:52 -0400
Subject: http://www.microsoft.com/technet/security/advisory/904797.mspx
|
> Microsoft Security Advisory (904797)
> Vulnerability in Remote Desktop Protocol (RDP) Could Lead to Denial of Service
|
|
