PT-2009-5948 · Microsoft · Windows 7+2

Laurent Gaffié · Publicado 2009-11-13 · Atualizado 2018-10-30 · CVE-2009-3676

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 Microsoft Windows 7

Description A denial of service issue exists in the Microsoft Server Message Block (SMB) client implementation, allowing remote SMB servers and man-in-the-middle attackers to cause a system hang via a specially crafted SMB response packet. This can be achieved by sending an SMBv1 or SMBv2 response packet with an incorrect length value in a NetBIOS header or an additional length field at the end of the response packet. An attempt to exploit this issue does not require authentication, and a successful exploitation could cause the computer to stop responding until restarted.

Recommendations For Microsoft Windows Server 2008 R2, apply the necessary patch to fix the SMB client implementation. For Microsoft Windows 7, apply the necessary patch to fix the SMB client implementation. As a temporary workaround, consider restricting access to SMB services until a patch is available.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2009-3676

Produtos afetados

Windows 7

Windows Server 2008 R2

Windows

Referências · 16

• 🔥 http://praetorianprefect.com/archives/2009/11/how-to-crash-windows-7-and-server-2008 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2009/Nov/134 · Exploit
• 🔥 http://g-laurent.blogspot.com/2009/11/windows-7-server-2008r2-remote-kernel.html · Exploit
• http://blogs.technet.com/msrc/archive/2009/11/13/microsoft-security-advisory-977544-released.aspx · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3676 · Nota de Segurança
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS10-020 · Nota
• http://us-cert.gov/cas/techalerts/TA10-103A.html · Nota
• http://securitytracker.com/id?1023179 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3676 · Nota de Segurança
• http://microsoft.com/technet/security/advisory/977544.mspx · Aviso do Fabricante
• http://secunia.com/advisories/37347 · Aviso do Fabricante
• http://news.cnet.com/8301-27080_3-10395891-245.html · Nota
• http://vupen.com/english/advisories/2009/3216 · Aviso do Fabricante
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020 · Aviso do Fabricante
• http://secunia.com/blog/66 · Aviso do Fabricante