ðòïåëôù 


  áòèé÷ 


Apache-Talk @lexa.ru 

Inet-Admins @info.east.ru 

Filmscanners @halftone.co.uk 

Security-alerts @yandex-team.ru 

nginx-ru @sysoev.ru 

  óôáôøé 


  ðåòóïîáìøîïå 


  ðòïçòáííù 



ðéûéôå
ðéóøíá














     áòèé÷ :: Security-alerts
Security-Alerts mailing list archive (security-alerts@yandex-team.ru)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[security-alerts] FW: [SA21276] Microsoft Windows Server Driver Denial of Service Vulnerability



> ----------------------------------------------------------------------
> 
> TITLE:
> Microsoft Windows Server Driver Denial of Service Vulnerability
> 
> SECUNIA ADVISORY ID:
> SA21276
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/21276/
> 
> CRITICAL:
> Less critical
> 
> IMPACT:
> DoS
> 
> WHERE:
> From local network
> 
> OPERATING SYSTEM:
> Microsoft Windows XP Professional
> http://secunia.com/product/22/
> Microsoft Windows XP Home Edition
> http://secunia.com/product/16/
> Microsoft Windows Server 2003 Web Edition
> http://secunia.com/product/1176/
> Microsoft Windows Server 2003 Standard Edition
> http://secunia.com/product/1173/
> Microsoft Windows Server 2003 Enterprise Edition
> http://secunia.com/product/1174/
> Microsoft Windows Server 2003 Datacenter Edition
> http://secunia.com/product/1175/
> Microsoft Windows 2000 Server
> http://secunia.com/product/20/
> Microsoft Windows 2000 Professional
> http://secunia.com/product/1/
> Microsoft Windows 2000 Datacenter Server
> http://secunia.com/product/1177/
> Microsoft Windows 2000 Advanced Server
> http://secunia.com/product/21/
> 
> DESCRIPTION:
> ISS X-Force has discovered a vulnerability in Microsoft Windows,
> which can be exploited by malicious people to cause a DoS (Denial of
> Service).
> 
> The vulnerability is caused due to a NULL pointer dereference error
> in the Server driver (srv.sys) when processing certain SMB (Server
> Message Block) data and can be exploited by sending a specially
> crafted network packet to a vulnerable system.
> 
> Successful exploitation crashes the system.
> 
> The vulnerability has been confirmed on Windows XP SP2 (fully
> patched). Other versions are reportedly also affected.
> 
> SOLUTION:
> Restrict traffic to ports 135-139 and 445.
> 
> PROVIDED AND/OR DISCOVERED BY:
> Tom Cross, David Means, and Scott Warfield of ISS X-Force.
> 
> ORIGINAL ADVISORY:
> ISS X-Force:
> http://xforce.iss.net/xforce/alerts/id/231
> 
> MSRC Blog:
> http://blogs.technet.com/msrc/archive/2006/07/28/443837.aspx
> 
> 




 




Copyright © Lexa Software, 1996-2009.