[security-alerts] FW: [SA20639] Microsoft Windows TCP/IP Protocol Driver Buffer Overflow

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> TITLE:
> Microsoft Windows TCP/IP Protocol Driver Buffer Overflow
> 
> SECUNIA ADVISORY ID:
> SA20639
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/20639/
> 
> CRITICAL:
> Moderately critical
> 
> IMPACT:
> DoS, System access
> 
> WHERE:
> From remote
> 
> OPERATING SYSTEM:
> Microsoft Windows 2000 Advanced Server
> http://secunia.com/product/21/
> Microsoft Windows 2000 Datacenter Server
> http://secunia.com/product/1177/
> Microsoft Windows 2000 Professional
> http://secunia.com/product/1/
> Microsoft Windows 2000 Server
> http://secunia.com/product/20/
> Microsoft Windows Server 2003 Datacenter Edition
> http://secunia.com/product/1175/
> Microsoft Windows Server 2003 Enterprise Edition
> http://secunia.com/product/1174/
> Microsoft Windows Server 2003 Standard Edition
> http://secunia.com/product/1173/
> Microsoft Windows Server 2003 Web Edition
> http://secunia.com/product/1176/
> Microsoft Windows XP Home Edition
> http://secunia.com/product/16/
> Microsoft Windows XP Professional
> http://secunia.com/product/22/
> 
> DESCRIPTION:
> A vulnerability has been reported in Microsoft Windows, which can be
> exploited by malicious people to cause a DoS (Denial of Service) or
> potentially compromise a vulnerable system.
> 
> The vulnerability is caused due to a boundary error in the TCP/IP
> protocol driver within the IP source routing mechanism and can be
> exploited via a specially crafted IP packet.
> 
> According to the vendor, successful exploitation most likely causes a
> crash, but may potentially allow execution of arbitrary code. However,
> exploitation requires that "IP Source Routing" is enabled (disabled by
> default on Windows XP SP2 and Windows Server 2003 SP1) or the "Routing
> and Remote Access Service" is enabled (disabled by default).
> 
> SOLUTION:
> Apply patches.
> 
> Windows 2000 SP4:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=305e2
> 08c-d75c-471b-9e57-30d01e320ad1
> 
> Windows XP SP1/SP2:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=b62ab
> e8e-4735-4934-a66e-5b957986efbf
> 
> Windows XP Professional x64 Edition:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=44213
> 900-9082-45dc-b514-31d38717fe89
> 
> Windows Server 2003 and Windows Server 2003 SP1:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=ea319
> c61-b405-41ab-9eee-d5b3488b90e0
> 
> Windows Server 2003 for Itanium-based systems and Windows Server 2003
> with SP1 for Itanium-based systems:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=cd8b8
> 8b5-f90f-4c0c-a5ad-3641751381c9
> 
> Windows Server 2003 x64 Edition:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=cd869
> 9bc-6760-4f0e-b8e0-2e7d89092ce8
> 
> PROVIDED AND/OR DISCOVERED BY:
> The vendor credits Andrey Minaev.
> 
> ORIGINAL ADVISORY:
> MS06-032 (KB917953):
> http://www.microsoft.com/technet/security/Bulletin/MS06-032.mspx
>