Info

Disclosure

Oct 11, 2005

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A remote overflow exists in Microsoft Windows. The 'Client Service for NetWare (CSNW)' fails to perform proper bounds checking resulting in a buffer overflow. With specially crafted network messages, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Commercial
Disclosure: OSVDB Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

Products

Microsoft Corporation	Windows	XP SP2
		2003 Server SP1
		2003 Server
		XP SP1
		2000 SP4

References

Security Tracker: 1015041
Bugtraq ID: 15066
Secunia Advisory ID: 17165 17223
SCIP VulDB ID: 1801
CVE ID: 2005-1985 (see also: NVD)
Keyword: 2005006318
ISS X-Force ID: 21700
Microsoft Knowledge Base Article: 899589
Generic Exploit URL: http://immunitysec.com
Vendor URL: http://www.microsoft.com/
Vendor Specific Advisory URL: http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=361442&RenditionID=
Microsoft Security Bulletin: MS05-046

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/19922

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

Microsoft Corporation

Windows

References

Credit