[security-alerts] FW: [SA20000] Microsoft Windows MSDTC Denial of Service

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> TITLE:
> Microsoft Windows MSDTC Denial of Service
> 
> SECUNIA ADVISORY ID:
> SA20000
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/20000/
> 
> CRITICAL:
> Less critical
> 
> IMPACT:
> DoS
> 
> WHERE:
> From local network
> 
> OPERATING SYSTEM:
> Microsoft Windows 2000 Advanced Server
> http://secunia.com/product/21/
> Microsoft Windows 2000 Datacenter Server
> http://secunia.com/product/1177/
> Microsoft Windows 2000 Professional
> http://secunia.com/product/1/
> Microsoft Windows 2000 Server
> http://secunia.com/product/20/
> Microsoft Windows Server 2003 Datacenter Edition
> http://secunia.com/product/1175/
> Microsoft Windows Server 2003 Enterprise Edition
> http://secunia.com/product/1174/
> Microsoft Windows Server 2003 Standard Edition
> http://secunia.com/product/1173/
> Microsoft Windows Server 2003 Web Edition
> http://secunia.com/product/1176/
> Microsoft Windows XP Home Edition
> http://secunia.com/product/16/
> Microsoft Windows XP Professional
> http://secunia.com/product/22/
> 
> DESCRIPTION:
> Two vulnerabilities have been reported in Microsoft Windows, which
> can be exploited by malicious people to cause a DoS (Denial of
> Service).
> 
> 1) A boundary error in the MSDTC (Microsoft Distributed Transaction
> Coordinator) can be exploited to cause the component and dependent
> services to stop responding by sending a specially crafted network
> message.
> 
> 2) Another boundary error in the MSDTC (Microsoft Distributed
> Transaction Coordinator) can be exploited to cause the component and
> dependent services to stop responding by sending a specially crafted
> network message.
> 
> SOLUTION:
> Apply patches.
> 
> Microsoft Windows 2000 SP4:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=8B98F
380-0E5C-4B80-9710-95E1B35AFD83
> 
> Microsoft Windows XP SP1 / SP2:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=D80B4
3B2-727B-46B6-82D1-F2CBD916FE32
> 
> Microsoft Windows Server 2003:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=E7051
5C7-8924-46DA-8573-457957EEA0D7
> 
> Microsoft Windows Server 2003 for Itanium-based systems:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=7BD81
335-79EA-46CE-8D3C-0AA91EEFFF02
> 
> PROVIDED AND/OR DISCOVERED BY:
> 1) The vendor credits eEye Digital Security and Xiao Chen, McAfee.
> 2) The vendor credits eEye Digital Security and Kai Zhang, VenusTech.
> 
> ORIGINAL ADVISORY:
> MS06-018 (KB913580):
> http://www.microsoft.com/technet/security/Bulletin/MS06-018.mspx
> 
>