Vulnerability Bulletins |
Vulnerabilidad en el servicio de indexado de Microsoft Windows |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Avanzado |
| Required attacker level | Acceso remoto sin cuenta a un servicio exotico |
System information |
|
| Property | Value |
| Affected manufacturer | Microsoft |
| Affected software |
Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4 Microsoft Windows XP Service Pack 1 Microsoft Windows XP 64-Bit Edition Service Pack 1 Microsoft Windows XP 64-Bit Edition Version 2003 Microsoft Windows Server 2003 Microsoft Windows Server 2003 64-Bit Edition |
Description |
|
|
Existe una vulnerabilidad en el servicio de indexado de Microsoft Windows debido a un error en el manejo de las peticiones de validación. Un atacante podría explotar la vulnerabilidad mediante una petición maliciosa y posteriormente ejecutar código remotamente pudiendo conseguir también el control total sobre la máquina afectada. |
|
Solution |
|
|
Actualización de software Microsoft Windows Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4 http://www.microsoft.com/downloads/thankyou.aspx?FamilyID=cfa4f3da-0c2b-44b3-83db-eb4d8c5b3b13&displaylang=es Microsoft Windows XP Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=FB8A7622-94AB-44E7-85C3-163BAC4602E2&displaylang=es Microsoft Windows XP 64-Bit Edition Service Pack 1 http://www.microsoft.com/downloads/thankyou.aspx?FamilyID=30a83f1d-87e9-4720-8316-191ae509f094&displaylang=es Microsoft Windows XP 64-Bit Edition Version 2003 / Microsoft Windows Server 2003 64-Bit Edition http://www.microsoft.com/downloads/thankyou.aspx?FamilyID=c3474e75-1fe2-4215-8a8d-a9244ff93419&displaylang=es Microsoft Windows Server 2003 http://www.microsoft.com/downloads/thankyou.aspx?FamilyID=50f72dc5-5dd6-4d12-a91c-6815ec8203ef&displaylang=es |
|
Standar resources |
|
| Property | Value |
| CVE | CAN-2004-0897 |
| BID | |
Other resources |
|
|
Microsoft Security Bulletin MS05-003 http://www.microsoft.com/technet/security/Bulletin/MS05-003.mspx |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2005-01-12 |