Thread-topic: [SA21276] Microsoft Windows Server Driver Denial of Service Vulnerability
> ----------------------------------------------------------------------
>
> TITLE:
> Microsoft Windows Server Driver Denial of Service Vulnerability
>
> SECUNIA ADVISORY ID:
> SA21276
>
> VERIFY ADVISORY:
>
>
> CRITICAL:
> Less critical
>
> IMPACT:
> DoS
>
> WHERE:
> From local network
>
> OPERATING SYSTEM:
> Microsoft Windows XP Professional
>
> Microsoft Windows XP Home Edition
>
> Microsoft Windows Server 2003 Web Edition
>
> Microsoft Windows Server 2003 Standard Edition
>
> Microsoft Windows Server 2003 Enterprise Edition
>
> Microsoft Windows Server 2003 Datacenter Edition
>
> Microsoft Windows 2000 Server
>
> Microsoft Windows 2000 Professional
>
> Microsoft Windows 2000 Datacenter Server
>
> Microsoft Windows 2000 Advanced Server
>
>
> DESCRIPTION:
> ISS X-Force has discovered a vulnerability in Microsoft Windows,
> which can be exploited by malicious people to cause a DoS (Denial of
> Service).
>
> The vulnerability is caused due to a NULL pointer dereference error
> in the Server driver (srv.sys) when processing certain SMB (Server
> Message Block) data and can be exploited by sending a specially
> crafted network packet to a vulnerable system.
>
> Successful exploitation crashes the system.
>
> The vulnerability has been confirmed on Windows XP SP2 (fully
> patched). Other versions are reportedly also affected.
>
> SOLUTION:
> Restrict traffic to ports 135-139 and 445.
>
> PROVIDED AND/OR DISCOVERED BY:
> Tom Cross, David Means, and Scott Warfield of ISS X-Force.
>
> ORIGINAL ADVISORY:
> ISS X-Force:
>
>
> MSRC Blog:
>
>
>
