Title: Microsoft Windows WINS Server Remote Overflow
Info
Disclosure
Feb 10, 2004
Discovery
Unknown
Dates
Exploit
Unknown
Solution
Unknown
Description
A remote overflow exists in all server versions of Microsoft Windows running Windows Internet Name Service (WINS). The WINS fails to validate the length of certain packets resulting in a remote overflow. With a specially crafted request, an attacker can cause the service terminated or execute malicious
code, resulting in a loss of integrity or availability.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service,
Input Manipulation
Impact:
Loss of Integrity,
Loss of Availability
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
Solution
Currently, there are no known upgrades to correct this issue. However, Microsoft has released a patch to the affected versions of server to address this vulnerability. There is also a workaround to partly address this issue, please refer MS04-006.