PT-2011-3429 · Microsoft · Windows Server 2003+2

Published 2011-06-16 · Updated 2019-02-26 · CVE-2011-1868

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2

Description The Distributed File System (DFS) implementation does not properly validate fields in DFS responses, allowing remote DFS servers to execute arbitrary code via a crafted response. An unauthenticated remote code execution issue exists in the way the DFS client parses specially crafted DFS responses. This could allow an attacker to execute arbitrary code and take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows XP versions SP2 through SP3, update to a version that includes the fix for the DFS Memory Corruption issue. For Microsoft Windows Server 2003 version SP2, apply the necessary patch to resolve the DFS client parsing vulnerability.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-1868

Affected Products

Windows Server 2003

Windows Xp

Windows

References · 9

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-042 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1868 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-1868 · Security Note
• http://secunia.com/advisories/44894 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-042 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67726 · Note
• http://securitytracker.com/id?1025639 · Note
• http://securityfocus.com/bid/48180 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11758 · Note