Microsoft Windows Server 2003 SMB Redirector Local Denial Of Service Vulnerability

Bugtraq ID:	13008
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Apr 05 2005 12:00AM
Updated:	Apr 05 2005 12:00AM
Credit:	The individual or individuals responsible for the discovery of this issue are currently unknown; the vendor disclosed this issue.
Vulnerable:	Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Datacenter Edition
Not Vulnerable:	Microsoft Windows Server 2003 Web Edition SP1 Microsoft Windows Server 2003 Standard Edition SP1 Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Microsoft Windows Server 2003 Enterprise Edition SP1 Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Microsoft Windows Server 2003 Datacenter Edition SP1

Microsoft Windows Server 2003 SMB Redirector Local Denial Of Service Vulnerability

A local denial of service vulnerability affects Microsoft Windows Server 2003. This issue is due to a failure of the application to properly handle malformed network data during times of heavy load.

A local attacker may leverage this issue to cause an affected computer to restart or stop responding with a blue screen, effectively denying service to legitimate users.

Microsoft Windows Server 2003 SMB Redirector Local Denial Of Service Vulnerability

No exploit is required to leverage this issue.

Microsoft Windows Server 2003 SMB Redirector Local Denial Of Service Vulnerability

Solution:
Microsoft has released Service Pack 1 for Windows Server 2003 dealing with this issue.


Microsoft Windows Server 2003 Enterprise Edition

• Microsoft Microsoft Windows Server 2003 Service Pack 1 (32 bit)
  http://www.microsoft.com/downloads/details.aspx?familyid=22CFC239-337C -4D81-8354-72593B1C1F43&displaylang=en

Microsoft Windows Server 2003 Web Edition

• Microsoft Microsoft Windows Server 2003 Service Pack 1 (32 bit)
  http://www.microsoft.com/downloads/details.aspx?familyid=22CFC239-337C -4D81-8354-72593B1C1F43&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition Itanium 0

• Microsoft Itanium-based Versions of Microsoft Windows Server 2003 Service Pack 1 (64 bit)
  http://www.microsoft.com/downloads/details.aspx?familyid=890C5C44-815C -45BD-8B08-4FE901BB8FDF&displaylang=en

Microsoft Windows Server 2003 Standard Edition

• Microsoft Microsoft Windows Server 2003 Service Pack 1 (32 bit)
  http://www.microsoft.com/downloads/details.aspx?familyid=22CFC239-337C -4D81-8354-72593B1C1F43&displaylang=en

Microsoft Windows Server 2003 Datacenter Edition

• Microsoft Microsoft Windows Server 2003 Service Pack 1 (32 bit)
  http://www.microsoft.com/downloads/details.aspx?familyid=22CFC239-337C -4D81-8354-72593B1C1F43&displaylang=en

Microsoft Windows Server 2003 Datacenter Edition Itanium 0

• Microsoft Itanium-based Versions of Microsoft Windows Server 2003 Service Pack 1 (64 bit)
  http://www.microsoft.com/downloads/details.aspx?familyid=890C5C44-815C -45BD-8B08-4FE901BB8FDF&displaylang=en

Microsoft Windows Server 2003 SMB Redirector Local Denial Of Service Vulnerability

References:

• Windows Server 2003 Service Pack 1 (Microsoft)
  
• You receive a "STOP 0x000000D1" error message on a blue screen in Windows Server (Microsoft)