PT-2010-2237 · Microsoft · Windows Server 2008+3

Laurent Gaffiã© · Publicado 2010-04-14 · Atualizado 2023-12-07 · CVE-2010-0476

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Vista Gold, SP1, and SP2 Microsoft Windows Server 2008 Gold and SP2

Description The issue allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service via a crafted SMB transaction response. This can be achieved using either SMBv1 or SMBv2. An unauthenticated remote code execution vulnerability exists in the way the Microsoft Server Message Block (SMB) client implementation parses specially crafted SMB transaction responses. An attacker who successfully exploits this issue could take complete control of the system.

Recommendations For Microsoft Windows Server 2003 SP2, update to a version that includes the fix for this issue. For Microsoft Windows Vista Gold, SP1, and SP2, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 Gold and SP2, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting SMB traffic to minimize the risk of exploitation.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-0476

Produtos afetados

Windows

Windows Server 2003

Windows Server 2008

Windows Vista

Referências · 9

• 🔥 https://exploit-db.com/exploits/12273 · Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6918 · Nota
• http://secunia.com/advisories/39372 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0476 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA10-103A.html · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-020 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0476 · Nota de Segurança
• http://securityfocus.com/bid/39336 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020 · Aviso do Fabricante