[security-alerts] FW: [SA21388] Windows Server Service Buffer Overflow Vulnerability

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> ----------------------------------------------------------------------
> 
> TITLE:
> Windows Server Service Buffer Overflow Vulnerability
> 
> SECUNIA ADVISORY ID:
> SA21388
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/21388/
> 
> CRITICAL:
> Moderately critical
> 
> IMPACT:
> System access
> 
> WHERE:
> From local network
> 
> OPERATING SYSTEM:
> Microsoft Windows 2000 Advanced Server
> http://secunia.com/product/21/
> Microsoft Windows 2000 Datacenter Server
> http://secunia.com/product/1177/
> Microsoft Windows 2000 Professional
> http://secunia.com/product/1/
> Microsoft Windows 2000 Server
> http://secunia.com/product/20/
> Microsoft Windows Server 2003 Datacenter Edition
> http://secunia.com/product/1175/
> Microsoft Windows Server 2003 Enterprise Edition
> http://secunia.com/product/1174/
> Microsoft Windows Server 2003 Standard Edition
> http://secunia.com/product/1173/
> Microsoft Windows Server 2003 Web Edition
> http://secunia.com/product/1176/
> Microsoft Windows XP Home Edition
> http://secunia.com/product/16/
> Microsoft Windows XP Professional
> http://secunia.com/product/22/
> 
> DESCRIPTION:
> A vulnerability has been reported in Microsoft Windows, which can be
> exploited by malicious people to compromise a vulnerable system.
> 
> The vulnerability is caused due to a boundary error in the Server
> service during the processing of RPC traffic. This can be exploited
> to cause a buffer overflow by sending a specially crafted packet to
> port 139/TCP or 445/TCP.
> 
> Successful exploitation allows execution of arbitrary code.
> 
> NOTE: According to Microsoft, the vulnerability is already being
> actively exploited.
> 
> Other unspecified issues discovered by Microsoft have also been
> reported.
> 
> SOLUTION:
> Apply patches.
> 
> Windows 2000 (requires SP4):
> http://www.microsoft.com/downloads/details.aspx?FamilyId=3b611
> 53d-359f-4441-a448-24062cb2387c
> 
> Windows XP (requires SP1 or SP2):
> http://www.microsoft.com/downloads/details.aspx?FamilyId=2996b
> 9b6-03ff-4636-861a-46b3eac7a305
> 
> Windows XP Professional x64 Edition:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=314c7
> c2c-9a02-4e56-98cf-97703fecf0be
> 
> Windows Server 2003 (optionally with SP1):
> http://www.microsoft.com/downloads/details.aspx?FamilyId=a0058
> f39-6dea-4dfc-9dd6-4cb45b305dec
> 
> Windows Server 2003 for Itanium-based systems (optionally with SP1):
> http://www.microsoft.com/downloads/details.aspx?FamilyId=af970
> 833-2044-4284-937d-3beb2e2f286d
> 
> Windows Server 2003 x64 Edition:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=3b0c1
> 954-fca5-4e95-abb2-6066a9d6bc76
> 
> PROVIDED AND/OR DISCOVERED BY:
> The vendor credits US-CERT and SANS.
> 
> ORIGINAL ADVISORY:
> MS06-040 (KB921883):
> http://www.microsoft.com/technet/security/Bulletin/MS06-040.mspx