CVE-2008-4250

Beskrivelse

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."

Beskrivelsen gjengis slik kilden har publisert den, på engelsk.

Berørte produkter

Svakhetstype

• CWE-94: Improper Control of Generation of Code ('Code Injection')

  The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or b…

• CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

  The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations tha…

Angrepsteknikker

Utledet gjennom svakhetstypen: CVE til CWE til CAPEC til ATT&CK. Dette viser hvilke teknikker svakhetsklassen historisk brukes til. Det er ikke en påstand om at nettopp denne sårbarheten er utnyttet slik.

• T1027.006: HTML Smuggling stealth
• T1027.009: Embedded Payloads stealth
• T1564.009: Resource Forking stealth

Referanser

• http://blogs.securiteam.com/index.php/archives/1150 Permissions Required
• http://marc.info/?l=bugtraq&m=122703006921213&w=2 Issue Tracking, Mailing List, Third Party Advisory
• http://secunia.com/advisories/32326 Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/827267 Third Party Advisory, US Government Resource
• http://www.securityfocus.com/archive/1/497808/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/497816/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/31874 Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1021091= Broken Link, Third Party Advisory, VDB Entry
• http://www.us-cert.gov/cas/techalerts/TA08-297A.html Broken Link, Third Party Advisory, US Government Resource
• http://www.us-cert.gov/cas/techalerts/TA09-088A.html Third Party Advisory, US Government Resource
• http://www.vupen.com/english/advisories/2008/2902 Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067 Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46040 Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A60… Broken Link, Third Party Advisory
• https://www.exploit-db.com/exploits/6824 Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/6841 Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/7104 Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/7132 Exploit, Third Party Advisory, VDB Entry
• http://blogs.securiteam.com/index.php/archives/1150 Permissions Required
• http://marc.info/?l=bugtraq&m=122703006921213&w=2 Issue Tracking, Mailing List, Third Party Advisory