BID:2846

Microsoft Windows 2000 Telnet System Call DoS Vulnerability

Info

Microsoft Windows 2000 Telnet System Call DoS Vulnerability

Bugtraq ID:	2846
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jun 07 2001 12:00AM
Updated:	Jun 07 2001 12:00AM
Credit:	Posted in a Microsoft Security Bulletin MS01-031 on June 7, 2001.
Vulnerable:	Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server + Avaya DefinityOne Media Servers + Avaya IP600 Media Servers + Avaya S3400 Message Application Server 0 + Avaya S8100 Media Servers 0 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server

Not Vulnerable:

Discussion

Microsoft Windows 2000 Telnet System Call DoS Vulnerability

Due to a flaw in the privilege level of a particular underlying system call, it is possible for a user to disrupt the telnet service of arbitrary users connected to a Windows 2000 host.

Typically, in order to make some System calls one requires a certain level of privilege (admin), but a flaw exists which enables a normal user to make a specific system call. If this system call is properly made it is possible to terminate telnet sessions. This is achieved if a program that has been loaded on the server initiates the system call to terminate a telnet session.

Exploit / POC

Microsoft Windows 2000 Telnet System Call DoS Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Microsoft Windows 2000 Telnet System Call DoS Vulnerability

Solution:
Microsoft has released a patch for Windows 2000 Advanced Server, Professional and Server which rectifies this issue. Microsoft has advised that Windows 2000 Datacenter Server patches are hardware specifice and should be obtained by the original equipment manufacturer.

Microsoft Windows 2000 Professional