Windows Remote Installation Service TFTP Server Lets Remote Users Overwrite Files to Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1017368 |
|
SecurityTracker URL: http://securitytracker.com/id/1017368
|
|
CVE Reference:
CVE-2006-5584
(Links to External Site)
|
Date: Dec 12 2006
|
Impact:
Execution of arbitrary code via network, Modification of system information, Modification of user information, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 2000 SP4
|
Description:
A vulnerability was reported in Windows Remote Installation Service. A remote user can overwrite operating system files to execute arbitrary code on the target system.
The Remote Installation Service (RIS) includes a TFTP service. A remote user can connect to the service and overwrite existing operating system files or upload arbitrary files. As a result, a remote user can modify the operating system and cause arbitrary code to be executed at a later time on the target system.
The Remote Install Service is not installed by default.
Microsoft credits Nicolas Ruff for reporting this vulnerability.
|
Impact:
A remote user can modify files to execute arbitrary code on the target system.
|
Solution:
The vendor has issued the following fix:
Microsoft Windows 2000 Service Pack 4:
http://www.microsoft.com/downloads/details.aspx?FamilyId=0ed62db9-4534-4f27-a49e-020c7a7d69e0"
A restart is required.
The Microsoft advisory is available at:
http://www.microsoft.com/technet/security/bulletin/ms06-077.mspx
|
Vendor URL: www.microsoft.com/technet/security/bulletin/ms06-077.mspx (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
|
|
Message History:
None.
|
Source Message Contents
|
Date: Tue, 12 Dec 2006 13:14:47 -0500
Subject: Microsoft Security Bulletin MS06-077: Vulnerability in Remote Installation Service Could Allow Remote Code Execution (926121)
|
http://www.microsoft.com/technet/security/bulletin/ms06-077.mspx
CVE-2006-5584
|
|
