| | site-map | e-mail

User:

Guest

Name: Password:

www.center.hu / Archive / Security news / august, 2006 / Vulnerabilidad in Windows through the RRAS service 

Vulnerabilidad in Windows through the RRAS service

Vulnerabilidad in Windows through the RRAS service

Madrid, August 8, 2006 - A remote denial of service vulnerability has been reported in the Routing and Remote Access Service (RRAS) in Microsoft Windows.

The problem lies in a null pointer in the RRAS (Routing and Remote Access Service) when processing specially-crafted requests. This can be exploited by remote attackers to crash vulnerable systems, leading to denial of services.

The systems affected are Windows 2000, Windows XP and Windows Server 2003, although in Windows XP Service Pack 2 and Windows Server 2003, attackers would need valid authentication credentials to be able to exploit the vulnerability. As a workaround, users are advised to restrict access (to trusted systems at least) to UDP ports 135, 137, 138 and 445, and TCP ports 135, 139, 445 and 593.

Oxygen3 24h-365d
by Panda Software

2006-08-09 13:48

Back