Not for 98x or WinME.

----- Original Messages ----- 

TITLE:
Microsoft Windows SMB Buffer Overflow Vulnerability

SECUNIA ADVISORY ID:
SA11634

VERIFY ADVISORY:
http://secunia.com/advisories/11634/

CRITICAL:
Moderately critical

IMPACT:
System access

WHERE:
>From local network

OPERATING SYSTEM:
Microsoft Windows 2000 Advanced Server
http://secunia.com/product/21/
Microsoft Windows 2000 Datacenter Server
http://secunia.com/product/1177/
Microsoft Windows 2000 Professional
http://secunia.com/product/1/
Microsoft Windows 2000 Server
http://secunia.com/product/20/
Microsoft Windows Server 2003 Datacenter Edition
http://secunia.com/product/1175/
Microsoft Windows Server 2003 Enterprise Edition
http://secunia.com/product/1174/
Microsoft Windows Server 2003 Standard Edition
http://secunia.com/product/1173/
Microsoft Windows Server 2003 Web Edition
http://secunia.com/product/1176/
Microsoft Windows XP Professional
http://secunia.com/product/22/

DESCRIPTION:
eEye Digital Security has reported a vulnerability in Microsoft
Windows, which can be exploited by malicious people to 
compromise a
vulnerable system.

The vulnerability is caused due to an unspecified boundary 
error
within the handling of SMB traffic. This could be exploited to 
cause
a buffer overflow via SMB and CIFS.

Successful exploitation requires that a malicious system can 
send
traffic to a vulnerable system or that a vulnerable system 
connects
to a malicious system.

SOLUTION:
Apply patches.

Microsoft Windows 2000 (requires Service Pack 3 or Service Pack 
4):
http://www.microsoft.com/downloads/details.aspx?FamilyId=656BDDA5-672B-4A6B-B192-24A2171C7355

Microsoft Windows XP (requires Service Pack 1 or Service Pack 
2):
http://www.microsoft.com/downloads/details.aspx?FamilyId=6DF9B2D9-B86E-4924-B677-978EC6B81B54

Microsoft Windows XP 64-Bit Edition (requires Service Pack 1
(Itanium)):
http://www.microsoft.com/downloads/details.aspx?FamilyId=E5043926-0B79-489B-8EA1-85512828C6F4

Microsoft Windows XP 64-Bit Edition Version 2003 (Itanium):
http://www.microsoft.com/downloads/details.aspx?FamilyId=8DA45DD0-882E-417C-A7F2-4AABAD675129

Microsoft Windows Server 2003:
http://www.microsoft.com/downloads/details.aspx?FamilyId=1B703115-54C0-445C-B5CE-E9A53C45B36A

Microsoft Windows Server 2003 (Itanium):
http://www.microsoft.com/downloads/details.aspx?FamilyId=8DA45DD0-882E-417C-A7F2-4AABAD675129

ORIGINAL ADVISORY:
MS05-011 (KB885250):
http://www.microsoft.com/technet/security/bulletin/ms05-011.mspx
============= PCWorks Mailing List =================
Don't see your post? Check our posting guidelines &
make sure you've followed proper posting procedures,
http://pcworkers.com/rules.htm
Contact list owner <[EMAIL PROTECTED]>
Unsubscribing and other changes: http://pcworkers.com
=====================================================

Reply via email to