Microsoft Windows Buffer Overflow in Processing Server Message Block Packets Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1014198 |
|
SecurityTracker URL: http://securitytracker.com/id/1014198
|
|
CVE Reference:
CAN-2005-1206
(Links to External Site)
|
Date: Jun 14 2005
|
Impact:
Execution of arbitrary code via network, Root access via local system
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 2000 SP4, XP SP2, 2003 SP1; and prior service packs
|
Description:
A vulnerability was reported in Microsoft's Server Message Block (SMB) protocol implementation, affecting Windows 2000, XP, and 2003. A remote user can execute arbitrary code on the target system.
A remote user can send specially crafted SMB packets to trigger a buffer overflow and execute arbitrary code. The code will run with system level privileges.
The vendor notes that other protocols such as Internetwork Packet Exchange (IPX) and Sequenced Packet Exchange (SPX) may also be vulnerable.
Microsoft credits Qualys with reporting this vulnerability.
|
Impact:
A remote user can execute arbitrary code on the target system with system privileges.
|
Solution:
The vendor has issued the following fixes:
Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4:
http://www.microsoft.com/downloads/details.aspx?FamilyId=1E83F120-01FB-4029-A524-F3AE08F8BB28
Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?FamilyId=9CC719AD-5E57-4AEF-9FB3-9F7AB7BB5D32
Microsoft Windows XP 64-Bit Edition Service Pack 1 (Itanium):
http://www.microsoft.com/downloads/details.aspx?FamilyId=B3A61221-0DAC-452C-87E9-3362DD97273A
Microsoft Windows XP 64-Bit Edition Version 2003 (Itanium):
http://www.microsoft.com/downloads/details.aspx?FamilyId=7D97522F-F322-44D4-9E60-BDFED4A7A079
Microsoft Windows XP Professional x64 Edition:
http://www.microsoft.com/downloads/details.aspx?FamilyId=716B9CDE-5EF1-4005-903F-FC720863F03C
Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?FamilyId=3EA61158-E7C5-49A8-A701-B16AAF83A188
Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems:
http://www.microsoft.com/downloads/details.aspx?FamilyId=7D97522F-F322-44D4-9E60-BDFED4A7A079
Microsoft Windows Server 2003 x64 Edition:
http://www.microsoft.com/downloads/details.aspx?FamilyId=B455A686-EFF2-44D7-BAFA-AC73F0F68FB1
A restart is required.
|
Vendor URL: www.microsoft.com/technet/security/Bulletin/MS05-027.mspx (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
|
|
Message History:
None.
|
Source Message Contents
|
Date: Tue, 14 Jun 2005 13:18:40 -0400
Subject: http://www.microsoft.com/technet/security/Bulletin/MS05-027.mspx
|
http://www.microsoft.com/technet/security/Bulletin/MS05-027.mspx
|
|
