OSVDB ID: 3903

Title: Microsoft Windows WINS Server Remote Overflow

Info

Disclosure

Feb 10, 2004

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A remote overflow exists in all server versions of Microsoft Windows running Windows Internet Name Service (WINS). The WINS fails to validate the length of certain packets resulting in a remote overflow. With a specially crafted request, an attacker can cause the service terminated or execute malicious code, resulting in a loss of integrity or availability.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Integrity, Loss of Availability
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Currently, there are no known upgrades to correct this issue. However, Microsoft has released a patch to the affected versions of server to address this vulnerability. There is also a workaround to partly address this issue, please refer MS04-006.

Products

Microsoft Corporation

Windows

2000 Server
NT 4.0 Server
2003 Server x64
2003 Server
NT 4.0 Server Terminal Server Edition

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/3903