OSVDB ID: 49243

Title: Microsoft Windows Server Service Crafted RPC Request Handling Unspecified Remote Code Execution

Info

Disclosure
Oct 23, 2008

Discovery
Unknown

Dates

Exploit
Oct 23, 2008

Solution
Oct 23, 2008

Description

 Microsoft Windows Server Service contains a flaw that may allow a malicious user to remotely execute arbitrary code. The issue is triggered when a crafted RPC request is handled. It is possible that the flaw may allow remote code execution resulting in a loss of integrity.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Public, Exploit Commercial, Exploit Wormified
Disclosure: Vendor Verified, Uncoordinated Disclosure, Discovered in the Wild

Solution

 Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

Products

Microsoft Corporation

Windows

 XP SP2
2003 Server SP1
XP Pro x64
2003 Server SP2
2003 Server x64
2003 Server x64 SP2
2003 Server for Itanium SP2
2000 SP4
XP Pro x64 SP2
XP SP3
2003 Server for Itanium SP1
2008 Server 32-bit
Vista
2008 Server x64
Vista SP1
2008 Server for Itanium
Vista x64
Vista x64 SP1

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/49243