Microsoft Windows XP Firewall ACL Bypass Vulnerability
BID:12057
Info
Microsoft Windows XP Firewall ACL Bypass Vulnerability
| Bugtraq ID: | 12057 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 20 2004 12:00AM |
| Updated: | Dec 20 2004 12:00AM |
| Credit: | The vendor announced this vulnerability. |
| Vulnerable: |
Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Professional SP2 Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Home SP2 |
| Not Vulnerable: | |
Discussion
Microsoft Windows XP Firewall ACL Bypass Vulnerability
Microsoft Windows XP Firewall is reported prone to an ACL bypass vulnerability. Reports indicate that the vulnerability presents itself when the Windows XP Firewall is configured to block access to Microsoft File and Printer Sharing on a dial-up interface.
This vulnerability may leave a computer user that is connected to the Internet using a dial-up connection under a false sense of security. The user may believe that the firewall is protecting them from malicious attacks and as a result may employ lax user credentials or share confidential data openly.
Microsoft Windows XP Firewall is reported prone to an ACL bypass vulnerability. Reports indicate that the vulnerability presents itself when the Windows XP Firewall is configured to block access to Microsoft File and Printer Sharing on a dial-up interface.
This vulnerability may leave a computer user that is connected to the Internet using a dial-up connection under a false sense of security. The user may believe that the firewall is protecting them from malicious attacks and as a result may employ lax user credentials or share confidential data openly.
Exploit / POC
Microsoft Windows XP Firewall ACL Bypass Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Microsoft Windows XP Firewall ACL Bypass Vulnerability
Solution:
The vendor has released a security update to address this vulnerability:
Microsoft Windows XP Tablet PC Edition SP2
Microsoft Windows XP Media Center Edition SP2
Microsoft Windows XP Home SP2
Microsoft Windows XP Professional SP2
Solution:
The vendor has released a security update to address this vulnerability:
Microsoft Windows XP Tablet PC Edition SP2
-
Microsoft Critical Update for Windows XP (KB886185)
http://www.microsoft.com/downloads/details.aspx?amp;amp;displaylang=en &familyid=da66a0ac-55ca-4591-b3e6-d78695899141&displaylang=en
Microsoft Windows XP Media Center Edition SP2
-
Microsoft Critical Update for Windows XP (KB886185)
http://www.microsoft.com/downloads/details.aspx?amp;amp;displaylang=en &familyid=da66a0ac-55ca-4591-b3e6-d78695899141&displaylang=en
Microsoft Windows XP Home SP2
-
Microsoft Critical Update for Windows XP (KB886185)
http://www.microsoft.com/downloads/details.aspx?amp;amp;displaylang=en &familyid=da66a0ac-55ca-4591-b3e6-d78695899141&displaylang=en
Microsoft Windows XP Professional SP2
-
Microsoft Critical Update for Windows XP (KB886185)
http://www.microsoft.com/downloads/details.aspx?amp;amp;displaylang=en &familyid=da66a0ac-55ca-4591-b3e6-d78695899141&displaylang=en
References
Microsoft Windows XP Firewall ACL Bypass Vulnerability
References:
References: