Microsoft Windows Kerberos Denial Of Service Vulnerability

Bugtraq ID:	14519
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-1981
Remote:	Yes
Local:	No
Published:	Aug 09 2005 12:00AM
Updated:	Jul 12 2009 05:06PM
Credit:	Tony Chin of Shell Inc. reported this issue to the vendor.
Vulnerable:	Microsoft Windows Server 2003 Web Edition SP1 Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Standard x64 Edition Microsoft Windows Server 2003 Standard Edition SP1 Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Enterprise x64 Edition Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition SP1 Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Datacenter x64 Edition Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Datacenter Edition SP1 Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server + Avaya DefinityOne Media Servers + Avaya IP600 Media Servers + Avaya S3400 Message Application Server 0 + Avaya S8100 Media Servers 0 Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP4 Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server
Not Vulnerable:

Microsoft Windows Kerberos Denial Of Service Vulnerability

Microsoft Windows is susceptible to a remote Kerberos denial of service vulnerability. By sending unspecified packets to the Kerberos service on TCP or UDP port 88, attackers may cause the affected service to crash.

This vulnerability allows remote attackers to crash the affected authentication service, denying further domain authentication to legitimate users. It should be noted that exploitation requires that attackers have valid logon credentials.

Microsoft Windows Kerberos Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft Windows Kerberos Denial Of Service Vulnerability

Solution:
Microsoft has released fixes to address supported platforms.


Microsoft Windows Server 2003 Datacenter Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=34E7CF41-C584 -4071-A36F-DE19D0D04B97

Microsoft Windows Server 2003 Datacenter x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=B86E688C-B668 -4841-B961-7C5412C525EC

Microsoft Windows Server 2003 Enterprise Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=34E7CF41-C584 -4071-A36F-DE19D0D04B97

Microsoft Windows Server 2003 Web Edition

• Microsoft Security Update for Windows Server 2003 (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=34E7CF41-C584 -4071-A36F-DE19D0D04B97

Microsoft Windows Server 2003 Web Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=34E7CF41-C584 -4071-A36F-DE19D0D04B97

Microsoft Windows Server 2003 Enterprise Edition Itanium 0

• Microsoft Security Update for Windows Server 2003 64-bit Itanium Edition (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=037CD6D6-11F7 -4C44-9CFB-4B6D0B9B93CB

Microsoft Windows Server 2003 Datacenter Edition

• Microsoft Security Update for Windows Server 2003 (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=34E7CF41-C584 -4071-A36F-DE19D0D04B97

Microsoft Windows Server 2003 Standard Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=34E7CF41-C584 -4071-A36F-DE19D0D04B97

Microsoft Windows 2000 Advanced Server SP4

• Microsoft Security Update for Windows 2000 (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=4E34CD17-8710 -4E22-8620-3B84139C18BB

Microsoft Windows Server 2003 Enterprise Edition Itanium SP1

• Microsoft Security Update for Windows Server 2003 64-bit Itanium Edition (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=037CD6D6-11F7 -4C44-9CFB-4B6D0B9B93CB

Microsoft Windows Server 2003 Standard Edition

• Microsoft Security Update for Windows Server 2003 (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=34E7CF41-C584 -4071-A36F-DE19D0D04B97

Microsoft Windows Server 2003 Datacenter Edition Itanium SP1

• Microsoft Security Update for Windows Server 2003 64-bit Itanium Edition (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=037CD6D6-11F7 -4C44-9CFB-4B6D0B9B93CB

Microsoft Windows Server 2003 Standard x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=B86E688C-B668 -4841-B961-7C5412C525EC

Microsoft Windows 2000 Server SP4

• Microsoft Security Update for Windows 2000 (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=4E34CD17-8710 -4E22-8620-3B84139C18BB

Microsoft Windows Server 2003 Enterprise Edition

• Microsoft Security Update for Windows Server 2003 (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=34E7CF41-C584 -4071-A36F-DE19D0D04B97

Microsoft Windows Server 2003 Enterprise x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=B86E688C-B668 -4841-B961-7C5412C525EC

Microsoft Windows 2000 Datacenter Server SP4

• Microsoft Security Update for Windows 2000 (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=4E34CD17-8710 -4E22-8620-3B84139C18BB

Microsoft Windows Server 2003 Datacenter Edition Itanium 0

• Microsoft Security Update for Windows Server 2003 64-bit Itanium Edition (KB899587)
  http://www.microsoft.com/downloads/details.aspx?familyid=037CD6D6-11F7 -4C44-9CFB-4B6D0B9B93CB

Microsoft Windows Kerberos Denial Of Service Vulnerability

References:

• Microsoft Security Bulletin MS05-042 (Microsoft)