Microsoft Windows 'NSlookup.exe' Unspecified Remote Code Execution Vulnerability

Bugtraq ID:	30636
Class:	Unknown
CVE:	CVE-2008-3648
Remote:	Yes
Local:	No
Published:	Aug 11 2008 12:00AM
Updated:	Aug 29 2008 02:34PM
Credit:	Ivan Sanchez
Vulnerable:	Microsoft Office XP SP2 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home SP1 - Microsoft Windows XP Home - Microsoft Windows XP Professional SP1 - Microsoft Windows XP Professional
Not Vulnerable:

Microsoft Windows 'NSlookup.exe' Unspecified Remote Code Execution Vulnerability

Microsoft Windows is prone to a remote code-execution vulnerability caused by an unspecified error in 'NSlookup.exe'.

Successfully exploiting this issue would allow an attacker to execute arbitrary code on an affected computer. Failed attacks will cause denial-of-service conditions.

Microsoft Windows XP Professional SP2 is vulnerable; other versions and products may also be affected.

Microsoft Windows 'NSlookup.exe' Unspecified Remote Code Execution Vulnerability

This issue is reportedly being actively exploited in the wild.

Microsoft Windows 'NSlookup.exe' Unspecified Remote Code Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

NOTE: The vendor is currently investigating the issue.

Microsoft Windows 'NSlookup.exe' Unspecified Remote Code Execution Vulnerability

References:

• Microsoft Windows Homepage (Microsoft)
  
• Monthly Security Bulletin Webcast Q&A - August, 2008 (Microsoft Security Response Center)
  
• Video of Poc (Ivan Sanchez)