PT-2010-1845 · Microsoft · Server Message Block (Smb) Protocol+1

Joshua Morin · Publicado 2010-02-10 · Atualizado 2023-12-07 · CVE-2010-0020

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue arises from the improper validation of request fields in the SMB implementation, allowing remote authenticated users to execute arbitrary code via a malformed request. An authenticated remote code execution issue exists in the way Microsoft Server Message Block (SMB) Protocol software handles specially crafted SMB packets. An attacker could exploit this by sending a specially crafted network message to a system running the Server service as an authenticated user. Successful exploitation could result in complete control of the affected system, although it will most probably cause a Denial of Service condition.

Recommendations For Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

DoS

Code Injection

Enumeração de Fraquezas

CWE-20

CWE-94

Identificadores relacionados

CVE-2010-0020

Produtos afetados

Server Message Block (Smb) Protocol

Windows

Referências · 6

• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-012 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-012 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-0020 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0020 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA10-040A.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8438 · Nota