Vulnerability Bulletins |
Denegación de servicio en Windows Media Services |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Denegación de Servicio |
| Dificulty | Avanzado |
| Required attacker level | Acceso remoto sin cuenta a un servicio exotico |
System information |
|
| Property | Value |
| Affected manufacturer | Microsoft |
| Affected software |
Microsoft Windows 2000 Server Service Pack 2 - Windows Media Services 4.1 Microsoft Windows 2000 Server Service Pack 3 - Windows Media Services 4.1 Microsoft Windows 2000 Server Service Pack 4 - Windows Media Services 4.1 |
Description |
|
| Se ha descubierto una vulnerabilidad en la versión 4.1 de Windows Media Services corriendo sobre Windows 2000 Server SP2, SP3 y SP4. Dos componentes de Windows Media Services, Media Station Service y Windows Media Monitor Service, manejan incorrectamente las conexiones TCP/IP. Esta vulnerabilidad podría permitir a un atacante remoto provocar una denegación de servicio mediante el envío de secuencias de paquetes TCP/IP especialmente diseñadas. | |
Solution |
|
|
Actualización de software Windows Media Services 4.1 Microsoft Windows 2000 Server Service Pack 2 Microsoft Windows 2000 Server Service Pack 3 Microsoft Windows 2000 Server Service Pack 4 http://www.microsoft.com/downloads/details.aspx?FamilyId=7F4C067C-5D34-48FB-A9FA-C2200243D4D2&displaylang=en |
|
Standar resources |
|
| Property | Value |
| CVE | CAN-2003-0905 |
| BID | |
Other resources |
|
|
Microsoft Security Bulletin MS04-008 http://www.microsoft.com/technet/security/Bulletin/MS04-008.mspx |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2004-03-10 |