PT-2009-1255 · Microsoft · Server Message Block (Smb) Protocol+6

Published 2009-01-14 · Updated 2024-10-15 · CVE-2008-4835

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4 through 2000 SP4, XP SP2 through XP SP3, Server 2003 SP1 through Server 2003 SP2, Vista Gold through Vista SP1, and Server 2008

Description The issue allows remote attackers to execute arbitrary code via malformed values of unspecified fields inside the SMB packets in an NT Trans2 request, related to insufficiently validating the buffer size. An unauthenticated remote code execution vulnerability exists in the way that Microsoft Server Message Block (SMB) Protocol software handles specially crafted SMB packets. An attempt to exploit the vulnerability would not require authentication, allowing an attacker to exploit the vulnerability by sending a specially crafted network message to a computer running the Server service. An attacker who successfully exploited this vulnerability could cause the attacker to take complete control of the system. Most attempts to exploit this vulnerability would result in a system denial of service condition, however remote code execution is theoretically possible.

Recommendations For Microsoft Windows 2000 SP4, update to a newer version to mitigate the risk. For Microsoft Windows XP SP2 and SP3, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 SP1 and SP2, update to a newer version to mitigate the risk. For Microsoft Windows Vista Gold and SP1, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to the Server service until a patch is available.

Fix

RCE

DoS

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-4835

Affected Products

Windows 2000

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

Server Message Block (Smb) Protocol

Windows

References · 12

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-001 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4835 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2008-4835 · Security Note
• http://securityfocus.com/bid/33122 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5248 · Note
• http://us-cert.gov/cas/techalerts/TA09-013A.html · Note
• http://securityfocus.com/archive/1/500013/100/0/threaded · Note
• https://t.me/cvenotify/98103 · Telegram Post
• http://zerodayinitiative.com/advisories/ZDI-09-002 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2009/ms09-001 · Note
• http://vupen.com/english/advisories/2009/0116 · Note
• http://securitytracker.com/id?1021560 · Note