PT-2010-1841 · Microsoft · Windows Server 2003+4

Laurent Gaffiã© · Published 2010-02-10 · Updated 2019-02-26 · CVE-2010-0016

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Microsoft Windows 2000 SP4 Microsoft Windows XP SP2 and SP3 Microsoft Windows Server 2003 SP2

Description The issue arises from the improper validation of response fields by the SMB client implementation, allowing remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response. An unauthenticated remote code execution vulnerability exists in the way that Microsoft Server Message Block (SMB) Protocol software handles specially crafted SMB responses. This could allow an attacker to take complete control of the system by sending a specially crafted SMB response to a client-initiated SMB request.

Recommendations For Microsoft Windows 2000 SP4, update to a version that includes the fix for this issue. For Microsoft Windows XP SP2 and SP3, update to a version that includes the fix for this issue. For Microsoft Windows Server 2003 SP2, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to SMB services until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-0016

Affected Products

Windows

Windows 2000

Windows Server 2003

Windows Xp

Smb

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2010-0016 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-006 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0016 · Security Note
• http://us-cert.gov/cas/techalerts/TA10-040A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-006 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8278 · Note