PT-2009-4912 · Microsoft · Windows Vista Sp2+2

Published 2009-12-09 · Updated 2023-12-07 · CVE-2009-2505

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2

Description A remote code execution issue exists due to improper validation of MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication requests. This allows remote attackers to execute arbitrary code via crafted structures in a malformed request. The issue is caused by incorrect copying into memory of messages received by the server when handling PEAP authentication attempts, which could allow an attacker to take complete control of an affected system.

Recommendations For Microsoft Windows Vista SP2, update the system to address the issue. For Microsoft Windows Server 2008 SP2, update the server to resolve the vulnerability. As a temporary workaround, consider restricting access to the PEAP authentication protocol until a patch is available.

Fix

RCE

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2009-2505

Affected Products

Windows Server 2008 R2

Windows Vista Sp2

Windows

References · 7

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-071 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2505 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-2505 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6063 · Note
• http://us-cert.gov/cas/techalerts/TA09-342A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2009/ms09-071 · Note
• http://securitytracker.com/id?1023291 · Note