From: Secunia Security Advisories (sec-advsecunia.com)
Date: Tue Apr 05 2005 - 09:52:05 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

----------------------------------------------------------------------

Want a new IT Security job?

Vacant positions at Secunia:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
Windows Server 2003 Local Denial of Service Vulnerabilities

SECUNIA ADVISORY ID:
SA14808

VERIFY ADVISORY:
http://secunia.com/advisories/14808/

CRITICAL:
Not critical

IMPACT:
DoS

WHERE:
Local system

OPERATING SYSTEM:
Microsoft Windows Server 2003 Datacenter Edition
http://secunia.com/product/1175/
Microsoft Windows Server 2003 Enterprise Edition
http://secunia.com/product/1174/
Microsoft Windows Server 2003 Standard Edition
http://secunia.com/product/1173/
Microsoft Windows Server 2003 Web Edition
http://secunia.com/product/1176/

DESCRIPTION:
Two vulnerabilities have been reported in Microsoft Windows Server
2003, which can be exploited by malicious, local users to cause a DoS
(Denial of Service).

1) The vulnerability is caused due to an error when the SMB
redirector receives a browser announcement frame and subsequently
tries to run code that is paged out. This can be exploited to cause
the system to crash by e.g. retrieving a large file from a network
share when the system is under heavy load.

2) The vulnerability is caused due to an error where the printer
driver under certain circumstances passes an invalid color adjustment
object to Windows Server 2003. This can be exploited to cause the
system to crash by a user through a terminal service session, where
the user opens a Microsoft Word message in Microsoft Outlook and then
prints the message to a network printer.

SOLUTION:
These issues have been resolved in Service Pack 1 for Windows Server
2003.

Windows Server 2003 SP1 (32-bit):
http://www.microsoft.com/downloads/details.aspx?FamilyId=22CFC239-337C-4D81-8354-72593B1C1F43

Windows Server 2003 SP1 (Itanium):
http://www.microsoft.com/downloads/details.aspx?FamilyId=890C5C44-815C-45BD-8B08-4FE901BB8FDF

PROVIDED AND/OR DISCOVERED BY:
Reported by vendor.

ORIGINAL ADVISORY:
Windows Server 2003 Service Pack 1:
http://support.microsoft.com/kb/824721/

SMB redirector DoS:
http://support.microsoft.com/kb/890554/

Printer driver DoS:
http://support.microsoft.com/kb/829422/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]