Microsoft Windows 2000/XP CRL File Failed Integrity Check Denial Of Service Vulnerability
BID:10901
Info
Microsoft Windows 2000/XP CRL File Failed Integrity Check Denial Of Service Vulnerability
| Bugtraq ID: | 10901 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 09 2004 12:00AM |
| Updated: | Aug 09 2004 12:00AM |
| Credit: | Discovery of this vulnerability is credited to Faro Poplar <[email protected]>. |
| Vulnerable: |
Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Media Center Edition SP1 Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP2 Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP 64-bit Edition Version 2003 SP1 Microsoft Windows XP 64-bit Edition Version 2003 Microsoft Windows XP 64-bit Edition SP1 Microsoft Windows XP 64-bit Edition Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP4 Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server |
| Not Vulnerable: | |
Discussion
Microsoft Windows 2000/XP CRL File Failed Integrity Check Denial Of Service Vulnerability
It is reported that Microsoft Windows 2000/XP does not verify the integrity of CRL (Certificate Revocation Lists) files prior to accepting them as valid.
A local attacker, who has sufficient privileges to write to a CRL file, may exploit this vulnerability to deny X.509 based services to legitimate users.
This BID will be updated as further analysis of this vulnerability is completed.
It is reported that Microsoft Windows 2000/XP does not verify the integrity of CRL (Certificate Revocation Lists) files prior to accepting them as valid.
A local attacker, who has sufficient privileges to write to a CRL file, may exploit this vulnerability to deny X.509 based services to legitimate users.
This BID will be updated as further analysis of this vulnerability is completed.
Exploit / POC
Microsoft Windows 2000/XP CRL File Failed Integrity Check Denial Of Service Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
Microsoft Windows 2000/XP CRL File Failed Integrity Check Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Microsoft Windows 2000/XP CRL File Failed Integrity Check Denial Of Service Vulnerability
References:
References:
- Technet Security (Microsoft)
- Re: Windows doesn't verify digital signature of CRL files (Thomas Walpuski
- Windows doesn't verify digital signature of CRL files (Faro Poplar