PT-2007-3565 · Microsoft · Windows Vista X64 Edition+7

Published 2007-10-09 · Updated 2018-10-16 · CVE-2007-2228

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 x64 Edition Microsoft Windows Server 2003 x64 Edition SP2 Microsoft Windows Vista Microsoft Windows Vista x64 Edition Microsoft Windows 2000 SP4

Description A denial of service issue exists due to a failure in communicating with the NTLM security provider when performing authentication of RPC requests. An attacker could exploit this by sending a specially crafted RPC authentication request to a computer over the network, causing the computer to stop responding and automatically restart. In the case of Windows 2000 SP4, the impact is an information leak.

Recommendations For Microsoft Windows XP SP2, update to a newer version to mitigate the risk. For Microsoft Windows XP Professional x64 Edition, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 SP1, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 x64 Edition, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 x64 Edition SP2, update to a newer version to mitigate the risk. For Microsoft Windows Vista, update to a newer version to mitigate the risk. For Microsoft Windows Vista x64 Edition, update to a newer version to mitigate the risk. For Microsoft Windows 2000 SP4, restrict access to the NTLM security provider to minimize the risk of information leak. As a temporary workaround, consider disabling the RPC facility until a patch is available.

Fix

Related Identifiers

CVE-2007-2228

Affected Products

Windows

Windows 2000

Windows Server 2003

Windows Server 2003 X64 Edition

Windows Vista

Windows Vista X64 Edition

Windows Xp

Windows Xp Professional X64 Edition

References · 14

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-058 · Vendor Advisory
• http://secunia.com/advisories/27134 · Vendor Advisory
• http://securityfocus.com/archive/1/482366/100/0/threaded · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2228 · Security Note
• http://vupen.com/english/advisories/2007/3438 · Vendor Advisory
• http://secunia.com/advisories/27153 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2228 · Security Note
• http://securityfocus.com/bid/25974 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-058 · Note
• http://us-cert.gov/cas/techalerts/TA07-282A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2310 · Note
• http://zerodayinitiative.com/advisories/ZDI-07-055.html · Note
• http://securitytracker.com/id?1018787 · Note
• http://securityfocus.com/archive/1/482023/100/0/threaded · Note