PT-2007-3565 · Microsoft · Windows Vista X64 Edition+7

Publicado 2007-10-09 · Atualizado 2018-10-16 · CVE-2007-2228

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 x64 Edition Microsoft Windows Server 2003 x64 Edition SP2 Microsoft Windows Vista Microsoft Windows Vista x64 Edition Microsoft Windows 2000 SP4

Description A denial of service issue exists due to a failure in communicating with the NTLM security provider when performing authentication of RPC requests. An attacker could exploit this by sending a specially crafted RPC authentication request to a computer over the network, causing the computer to stop responding and automatically restart. In the case of Windows 2000 SP4, the impact is an information leak.

Recommendations For Microsoft Windows XP SP2, update to a newer version to mitigate the risk. For Microsoft Windows XP Professional x64 Edition, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 SP1, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 x64 Edition, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 x64 Edition SP2, update to a newer version to mitigate the risk. For Microsoft Windows Vista, update to a newer version to mitigate the risk. For Microsoft Windows Vista x64 Edition, update to a newer version to mitigate the risk. For Microsoft Windows 2000 SP4, restrict access to the NTLM security provider to minimize the risk of information leak. As a temporary workaround, consider disabling the RPC facility until a patch is available.

Correção

Identificadores relacionados

CVE-2007-2228

Produtos afetados

Windows

Windows 2000

Windows Server 2003

Windows Server 2003 X64 Edition

Windows Vista

Windows Vista X64 Edition

Windows Xp

Windows Xp Professional X64 Edition

Referências · 14

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-058 · Aviso do Fabricante
• http://secunia.com/advisories/27134 · Aviso do Fabricante
• http://securityfocus.com/archive/1/482366/100/0/threaded · Aviso do Fabricante
• http://securityfocus.com/bid/25974 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-058 · Nota
• http://us-cert.gov/cas/techalerts/TA07-282A.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2310 · Nota
• http://zerodayinitiative.com/advisories/ZDI-07-055.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2228 · Nota de Segurança
• http://vupen.com/english/advisories/2007/3438 · Aviso do Fabricante
• http://secunia.com/advisories/27153 · Aviso do Fabricante
• http://securitytracker.com/id?1018787 · Nota
• http://securityfocus.com/archive/1/482023/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2228 · Nota de Segurança