OSVDB ID: 27644

Title: Microsoft Windows Server Driver (srv.sys) Crafted SMB Packet NULL Dereference DoS

Info

Disclosure
Jul 28, 2006

Discovery
Unknown

Dates

Exploit
Jul 12, 2006

Solution
Unknown

Description

 Windows contains a flaw that may allow a remote denial of service. The issue is triggered when an attacker sends a specially crafted SMB packet to the Server service (srv.sys), and will result in loss of availability for the platform.

Classification

 Location: Remote / Network Access
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Availability
Solution: Solution Unknown
Exploit: Exploit Public
Disclosure: OSVDB Verified, Vendor Verified

Solution

 Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Microsoft Corporation

Windows

 2000 SP4
XP SP1
XP SP2
XP Professional x64 Edition

Windows Server

 2003
2003 SP1
2003 for Itanium
2003 SP1 for Itanium

References

Credit
  • David Means - Internet Security Systems
  • Tom Cross - Internet Security Systems
  • Scott Warfield - Internet Security Systems


Direct URL: http://osvdb.org/27644