PT-2009-5947 · Microsoft · Windows 2000+3

Publicado 2009-12-09 · Atualizado 2018-10-30 · CVE-2009-3675

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4, XP SP2, XP SP3, and Server 2003 SP2

Description A denial of service issue exists due to the improper handling of specially crafted ISAKMP messages by the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows. This can be exploited via a malformed ISAKMP request over IPsec, allowing remote authenticated users to cause a denial of service through CPU consumption.

Recommendations For Microsoft Windows 2000 SP4, XP SP2, XP SP3, and Server 2003 SP2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2009-3675

Produtos afetados

Windows

Windows 2000

Windows Server 2003

Windows Xp

Referências · 6

• http://us-cert.gov/cas/techalerts/TA09-342A.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3675 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6639 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3675 · Nota de Segurança
• https://docs.microsoft.com/security-updates/securitybulletins/2009/ms09-069 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-069 · Aviso do Fabricante