int(4965)

Vulnerability Bulletins


Denegación de servicio en Microsoft Windows

Vulnerability classification

Property Value
Confidence level Oficial
Impact Denegación de Servicio
Dificulty Experto
Required attacker level Acceso remoto sin cuenta a un servicio estandar

System information

Property Value
Affected manufacturer Microsoft
Affected software Microsoft Windows 2000 SP4
Microsoft Windows XP
Microsoft Windows 2003 Server
Microsoft Windows 2008 Server

Description

Se ha descubierto una vulnerabilidad en los servicios LDAP de Directorio Activo en Microsoft Windows.

Un atacante remoto podría causar una denegación de servicio mediante una petición LDAP o LDAPS especialmente diseñadas.

Solution



Actualización de software

Microsoft (MS09-066)
Windows 2000 / patch Windows2000-KB973039-x86-ENU
Windows XP / patch Windowsxp-KB973039-x86-enu
Windows XP x64 / patch WindowsServer2003.WindowsXP-KB973039-x64-enu
Windows Server 2003 / patch Windowsserver2003-KB973039-x86-enu
Windows Server 2003 x64 / patch Windowsserver2003.WindowsXP-KB973039-x64-enu
Windows Server 2003 Itanium / patch Windowsserver2003-KB973039-ia64-enu
Windows Vista / patch Windows6.0-KB973039-x86
Windows Vista x64 / patch Windows6.0-KB973039-x64
Windows Server 2008 / patch Windowsserver2003-KB973039-x86-enu
Windows Server 2008 x64 / patch Windowsserver2003.WindowsXP-KB973039-x64-enu
Windows Server 2008 Itanium / patch Windowsserver2003-KB973039-ia64-enu
http://www.microsoft.com/downloads

Standar resources

Property Value
CVE CVE-2009-1928
BID

Other resources

Microsoft Security Bulletin (MS09-066)
http://www.microsoft.com/technet/security/bulletin/ms09-066.mspx

Version history

Version Comments Date
1.0 Aviso emitido 2009-11-16
Ministerio de Defensa
CNI
CCN
CCN-CERT