Vulnerability

CERT-In Vulnerability Note CIVN-2004-0057
RPC Runtime Library Vulnerability in Microsoft Windows NT 4.0

Original Issue Date:October 15, 2004

Severity Rating: HIGH

Overview

A vulnerability exists in Microsoft Windows NT Server 4.0, which can cause a Denial of Service and sensitive information disclosure.

Impact

Allow Information Disclosure
Denial of Service

Description

Remote Procedure Call RPC is a protocol that used by Windows operating system which provides an interprocess communication mechanism that allows a program that is running on one system to access services seamlessly on another system. The RPC Runtime Library provides services such as communication services, directory services, and security services to application developers.An unchecked buffer in the RPC Runtime Library causes an information disclosure and denial of service vulnerability.

An attacker could exploit this vulnerability by creating a series of specially crafted network messages and sending the messages to an affected system. Successful exploitation enables an attacker to read portions of active memory or cause the affected system to stop responding.

Solution

Apply appropriate patches as mentioned in the Microsoft Security Bulletin MS04-029

http://www.microsoft.com/technet/security/bulletin/MS04-029.mspx

Vendor Information

Microsoft Corporation

http://microsoft.com

References

Secunia Advisory SA12799

http://secunia.com/advisories/12799/

Securiteam

http://www.securiteam.com/windowsntfocus/6W00F0UBGM.html

CVE Name
CAN-2004-0569

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-2436857

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India