PT-2010-2066 · Microsoft · Windows Server 2008+6

Mark Rabinovich · Published 2010-04-14 · Updated 2023-12-07 · CVE-2010-0269

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2

Description The issue arises from the improper allocation of memory for SMB responses by the SMB client in Microsoft Windows, allowing remote SMB servers and man-in-the-middle attackers to execute arbitrary code via crafted SMBv1 or SMBv2 responses. This is an unauthenticated remote code execution vulnerability, where an attacker can exploit the issue by sending a specially crafted SMB response to a client-initiated SMB request, potentially leading to the execution of arbitrary code and complete control of an affected system. An attacker could then install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, consider disabling SMBv1 and SMBv2 protocols until a patch is available. As a temporary workaround, restrict access to SMB services to minimize the risk of exploitation. Avoid using SMB services for critical operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2010-0269

Affected Products

Windows

Windows 2000

Windows 7

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

References · 8

• 🔥 https://exploit-db.com/exploits/12273 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-0269 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0269 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020 · Vendor Advisory
• http://secunia.com/advisories/39372 · Note
• http://us-cert.gov/cas/techalerts/TA10-103A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7129 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-020 · Note