Microsoft Services for Unix NFS DoS Vulnerability

Bugtraq ID:	3089
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2001-0505
Remote:	Yes
Local:	No
Published:	Jul 24 2001 12:00AM
Updated:	Jul 11 2009 06:56AM
Credit:	Discovered by Peter Gründl <[email protected]> and published in a Microsoft Security Bulletin MS01-039 on July 24, 2001.
Vulnerable:	Microsoft Services for Unix 2.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0
Not Vulnerable:

Microsoft Services for Unix NFS DoS Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft Services for Unix NFS DoS Vulnerability

Solution:
Microsoft has released the following patches which rectify this issue:


Microsoft Services for Unix 2.0

• Microsoft Q294380
  Windows 2000
  http://download.microsoft.com/download/win2000platform/Patch/Q294380/N T5/EN-US/Q294380_SFU_2_X86.exe


• Microsoft Q294380
  Windows NT 4.0
  http://download.microsoft.com/download/winntsp/Patch/Q294380/NT4/EN-US /Q294380_SFU_2_X86.exe

Microsoft Services for Unix NFS DoS Vulnerability

References:

• Microsoft Security Bulletin MS01-039 (Microsoft)