PT-2009-2793 · Microsoft · Windows Server 2003+1
Publicado
2009-03-11
·
Atualizado
2019-02-26
·
CVE-2009-0094
CVSS v2.0
5.5
Média
| Vetor | AV:N/AC:L/Au:S/C:N/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows 2000 SP4
Microsoft Windows Server 2003 SP1
Microsoft Windows Server 2003 SP2
Description
The issue concerns the WINS server in Microsoft Windows, which does not properly restrict the registration of specific NetBIOS names,
wpad and isatap. This allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) features. As a result, attackers can conduct man-in-the-middle attacks by spoofing a proxy server or ISATAP route. This is achieved by registering one of these names in the WINS database.Recommendations
For Microsoft Windows 2000 SP4, apply the necessary patch to restrict the registration of
wpad and isatap NetBIOS names.
For Microsoft Windows Server 2003 SP1, apply the necessary patch to restrict the registration of wpad and isatap NetBIOS names.
For Microsoft Windows Server 2003 SP2, apply the necessary patch to restrict the registration of wpad and isatap NetBIOS names.Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Windows 2000
Windows Server 2003