PT-2003-2489 · Microsoft · Windows 2000+3

Jonathan Hunter · Publicado 2003-12-31 · Atualizado 2017-08-08 · CVE-2003-1544

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Windows 2000 versions prior to SP4 Windows XP (affected versions not specified)

Description The issue is related to an unrestricted critical resource lock in Terminal Services, allowing remote authenticated users to cause a denial of service by obtaining a read lock on msgina.dll, which prevents msgina.dll from being loaded.

Recommendations For Windows 2000, apply Service Pack 4 to resolve the issue. For Windows XP, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2003-1544

Produtos afetados

Terminal Service

Windows 2000

Windows Xp

Msgina.Dll

Referências · 10

• http://secunia.com/advisories/7959 · Aviso do Fabricante
• http://securityfocus.com/bid/6672 · Nota
• http://securityfocus.com/archive/1/308059 · Nota
• http://securitytracker.com/id?1005986 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11141 · Nota
• http://securityfocus.com/archive/1/308164 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11816 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1544 · Nota de Segurança
• http://support.microsoft.com/kb/815225/en-us · Aviso do Fabricante
• http://securityreason.com/securityalert/3654 · Nota