Vulnerability Bulletins |
Vulnerabilidad de desbordamiento de búfer en WINS permite ejecución remota de código |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Compromiso Root |
| Dificulty | Avanzado |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Microsoft |
| Affected software |
Microsoft Windows NT Server 4.0 Service Pack 6a Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6 Microsoft Windows 2000 Server Service Pack 2 Microsoft Windows 2000 Server Service Pack 3 Microsoft Windows 2000 Server Service Pack 4 Microsoft Windows Server 2003 Microsoft Windows Server 2003 64-Bit Edition |
Description |
|
| Se ha descubierto una vulnerabilidad de desbordamiento de búfer en Microsoft WINS. La explotación de esta vulnerabilidad podría permitir a un atacante remoto desde provocar una denegación de servicio hasta la ejecución remota de código mediante el envío de un paquete especialmente diseñado al servidor WINS. | |
Solution |
|
|
Actualización de software Microsoft Windows NT Server 4.0 Microsoft Windows NT Server 4.0 Service Pack 6a http://www.microsoft.com/downloads/details.aspx?FamilyId=67F91E33-E2EC-4CE9-B55B-509240B1A973 Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6 http://www.microsoft.com/downloads/details.aspx?FamilyId=FCAF39A9-73BD-4B7F-9DC1-ACED9FE61852 Microsoft Windows 2000 Microsoft Windows 2000 Server Service Pack 2, 3, 4 http://www.microsoft.com/downloads/details.aspx?FamilyId=FD38BD3F-2E56-45B8-B8B2-C5C798B0E70D Microsoft Windows Server 2003 Microsoft Windows Server 2003 http://www.microsoft.com/downloads/details.aspx?FamilyId=AA95192E-5B0B-45F0-B4AE-E228B0625F2D Microsoft Windows Server 2003 64-Bit Edition http://www.microsoft.com/downloads/details.aspx?FamilyId=6FD30C00-8D60-4CFD-A115-3708138F5B00 |
|
Standar resources |
|
| Property | Value |
| CVE | CAN-2003-0825 |
| BID | |
Other resources |
|
|
Microsoft Security Bulletin MS04-006 http://www.microsoft.com/technet/security/bulletin/MS04-006.mspx Qualys security advisory http://www.qualys.com/docs/securityalerts/Qadvise-Microsoft-WINS-20040210.pdf |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2004-02-11 |