Microsoft Client Service for Netware Buffer Overflows Let Remote Users Execute Arbitrary Code and Crash the System
|
|
SecurityTracker Alert ID: 1017224 |
|
SecurityTracker URL: http://securitytracker.com/id/1017224
|
|
CVE Reference:
CVE-2006-4688, CVE-2006-4689
(Links to External Site)
|
Date: Nov 14 2006
|
Impact:
Denial of service via network, Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
|
Description:
A vulnerability was reported in Microsoft Client Service for Netware. A remote user can execute arbitrary code on the target system. A remote user can cause denial of service conditions on the target system.
A remote user can send specially crafted data to trigger a buffer overflow and execute arbitrary code on the target system [CVE-2006-4688]. The code will run with the privileges of the target service.
A remote user can also send specially crafted data to trigger a flaw in the driver and cause the target system to stop responding [CVE-2006-4689]. On Windows Server 2003, only a remote authenticated user can exploit this denial of service vulnerability.
This product is also known as the Gateway Service for NetWare on Windows 2000 Servers.
Microsoft credits Peter Winter-Smith of NGS Software and Sam Arun Raj of McAfee with reporting the code execution vulnerability and Sam Arun Raj with reporting the denial of service vulnerability.
|
Impact:
A remote user can execute arbitrary code on the target system.
A remote user can cause the target system to stop responding.
|
Solution:
The vendor has issued the following fixes:
Microsoft Windows 2000 Service Pack 4:
http://www.microsoft.com/downloads/details.aspx?FamilyId=3cf0b0d1-ff07-40ac-a6ac-44dc4a54f91e
Microsoft Windows XP Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?FamilyId=2f54258f-1071-467b-80a2-e4dbfc050667
Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?FamilyId=W2K3
A restart is required.
The Microsoft advisory is available at:
http://www.microsoft.com/technet/security/bulletin/ms06-066.mspx
|
Vendor URL: www.microsoft.com/technet/security/bulletin/ms06-066.mspx (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
Windows (2000), Windows (2003), Windows (XP)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Tue, 14 Nov 2006 13:14:41 -0500
Subject: Microsoft Security Bulletin MS06-066: Vulnerabilities in Client Service for NetWare Could Allow Remote Code Execution (923980)
|
http://www.microsoft.com/technet/security/bulletin/ms06-066.mspx
CVE-2006-4688
CVE-2006-4689
|
|
