PT-2005-2934 · Microsoft · Windows 2000+3

Kostya Kortchinsky · Publicado 2005-10-13 · Atualizado 2018-10-12 · CVE-2005-1985

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to Windows 2000 SP4, XP SP3, and Server 2003 SP2

Description The issue allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages. This is related to the Client Service for NetWare (CSNW) on affected Microsoft Windows versions.

Recommendations For Windows 2000, apply the necessary patch or update to at least SP4. For Windows XP, update to at least SP3. For Windows Server 2003, update to at least SP2. As a temporary workaround, consider disabling the Client Service for NetWare (CSNW) until a patch is available.

Correção

Identificadores relacionados

CVE-2005-1985

Produtos afetados

Client Service For Netware

Windows 2000

Windows Server 2003

Windows Xp

Referências · 12

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1106 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A910 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-046 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1536 · Nota
• http://osvdb.org/19922 · Nota
• http://secunia.com/advisories/17165 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1210 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1544 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1985 · Nota de Segurança
• http://securitytracker.com/id?1015041 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21700 · Nota
• http://securityfocus.com/bid/15066 · Nota