Microsoft Message Queuing Service RPC Query Heap Corruption Vulnerability
BID:31637
Info
Microsoft Message Queuing Service RPC Query Heap Corruption Vulnerability
| Bugtraq ID: | 31637 |
| Class: | Boundary Condition Error |
| CVE: |
2008-3479 CVE-2008-3479 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 14 2008 12:00AM |
| Updated: | Oct 24 2008 01:56PM |
| Credit: | TippingPoint and the Zero Day Initiative |
| Vulnerable: |
Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Advanced Server SP4 HP Storage Management Appliance 2.1 |
| Not Vulnerable: | |
Discussion
Microsoft Message Queuing Service RPC Query Heap Corruption Vulnerability
The Microsoft Message Queuing service (MSMQ) is prone to a remote heap-corruption vulnerability.
An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges, facilitating the complete compromise of an affected computer. Failed exploit attempts will result in a denial-of-service condition.
This issue is exploitable remotely on Windows 2000 systems only. The MSMQ service is not installed or enabled by default. For a computer to be exploited, an administrator must have explicitly installed and enabled the service.
The Microsoft Message Queuing service (MSMQ) is prone to a remote heap-corruption vulnerability.
An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges, facilitating the complete compromise of an affected computer. Failed exploit attempts will result in a denial-of-service condition.
This issue is exploitable remotely on Windows 2000 systems only. The MSMQ service is not installed or enabled by default. For a computer to be exploited, an administrator must have explicitly installed and enabled the service.
Exploit / POC
Microsoft Message Queuing Service RPC Query Heap Corruption Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Microsoft Message Queuing Service RPC Query Heap Corruption Vulnerability
Solution:
Microsoft released an update and an advisory to address this issue. Please see the references for more information.
Microsoft Windows 2000 Advanced Server SP4
Microsoft Windows 2000 Professional SP4
Microsoft Windows 2000 Datacenter Server SP4
Microsoft Windows 2000 Server SP4
Solution:
Microsoft released an update and an advisory to address this issue. Please see the references for more information.
Microsoft Windows 2000 Advanced Server SP4
-
Microsoft MS08-065: Vulnerability in Message Queuing could allow remote code execution
http://support.microsoft.com/kb/951071
Microsoft Windows 2000 Professional SP4
-
Microsoft MS08-065: Vulnerability in Message Queuing could allow remote code execution
http://support.microsoft.com/kb/951071
Microsoft Windows 2000 Datacenter Server SP4
-
Microsoft MS08-065: Vulnerability in Message Queuing could allow remote code execution
http://support.microsoft.com/kb/951071
Microsoft Windows 2000 Server SP4
-
Microsoft MS08-065: Vulnerability in Message Queuing could allow remote code execution
http://support.microsoft.com/kb/951071
References
Microsoft Message Queuing Service RPC Query Heap Corruption Vulnerability
References:
References:
- Microsoft Message Queuing (MSMQ) Center (Microsoft)
- MS08-065 : Exploitable for remote code execution? (Security Vulnerability Research & Defense)
- TPTI-08-07: Microsoft Windows Message Queuing Service Heap Overflow and Memory D (dvlabs
- Microsoft Security Bulletin MS08-065 (Microsoft)
- Microsoft Windows Message Queuing Service Memory Corruption Vulnerability (TippingPoint)