PT-2011-3429 · Microsoft · Windows Server 2003+2

Publicado 2011-06-16 · Atualizado 2019-02-26 · CVE-2011-1868

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2

Description The Distributed File System (DFS) implementation does not properly validate fields in DFS responses, allowing remote DFS servers to execute arbitrary code via a crafted response. An unauthenticated remote code execution issue exists in the way the DFS client parses specially crafted DFS responses. This could allow an attacker to execute arbitrary code and take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows XP versions SP2 through SP3, update to a version that includes the fix for the DFS Memory Corruption issue. For Microsoft Windows Server 2003 version SP2, apply the necessary patch to resolve the DFS client parsing vulnerability.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-1868

Produtos afetados

Windows Server 2003

Windows Xp

Windows

Referências · 9

• http://secunia.com/advisories/44894 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-042 · Aviso do Fabricante
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-042 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67726 · Nota
• http://securitytracker.com/id?1025639 · Nota
• http://securityfocus.com/bid/48180 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1868 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11758 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1868 · Nota de Segurança