SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   OS (Microsoft)  >   Windows Remote Desktop Protocol (RDP) Vendors:   Microsoft
Microsoft Windows Remote Desktop Protocol Bug Lets Remote Users Deny Service
SecurityTracker Alert ID:  1014498
SecurityTracker URL:  http://securitytracker.com/id/1014498
CVE Reference:   CVE-2005-1218   (Links to External Site)
Updated:  Aug 9 2005
Original Entry Date:  Jul 16 2005
Impact:   Denial of service via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): XP SP2, 2000 SP4, 2003 SP1; and prior service packs
Description:   A vulnerability was reported in Microsoft Windows in the Remote Desktop Protocol (RDP) implementation. A remote user can cause denial of service conditions.

A remote user can send specially crafted RDP packet to cause the target system to hang or crash.

Systems with RDP enabled (not the default except on Windows XP Media Center Edition) are affected.

The vendor credits Tom Ferris of Security Protocols with reporting this vulnerability.

Impact:   A remote user can cause denial of service conditions on the target system.
Solution:   The vendor has issued the following fixes:

Microsoft Windows 2000 Server Service Pack 4:

http://www.microsoft.com/downloads/details.aspx?FamilyId=18255896-8C5D-45C5-8840-C0C6EE1B14BB

Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2:

http://www.microsoft.com/downloads/details.aspx?FamilyId=A229F193-DA3F-4014-925D-1EACF5BA296C

Microsoft Windows XP Professional x64 Edition:

http://www.microsoft.com/downloads/details.aspx?FamilyId=79AD267F-1A2E-4597-AFD6-53369F0DD8B7

Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1:

http://www.microsoft.com/downloads/details.aspx?FamilyId=EFD642EF-95E2-4A99-8FFD-6032D86282A2

Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems:

http://www.microsoft.com/downloads/details.aspx?FamilyId=E5342572-C494-489D-A69E-290070EBFF1C

Microsoft Windows Server 2003 x64 Edition:

http://www.microsoft.com/downloads/details.aspx?FamilyId=F3DBA966-0F24-4129-9B55-2144E7F9D5DA

A restart is required.

Vendor URL:  www.microsoft.com/technet/security/Bulletin/MS05-041.mspx (Links to External Site)
Cause:   Input validation error

Message History:   None.


 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2021, SecurityGlobal.net LLC