Microsoft Windows 2000 / NT / XP MUP UNC Request Buffer Overflow Vulnerability
BID:4426
Info
Microsoft Windows 2000 / NT / XP MUP UNC Request Buffer Overflow Vulnerability
| Bugtraq ID: | 4426 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 04 2002 12:00AM |
| Updated: | Apr 04 2002 12:00AM |
| Credit: | Discovered by NSFOCUS Security Team <[email protected]>. |
| Vulnerable: |
Microsoft Windows XP Professional Microsoft Windows XP Home Microsoft Windows NT Workstation 4.0 SP6a Microsoft Windows NT Workstation 4.0 SP6 Microsoft Windows NT Workstation 4.0 SP5 Microsoft Windows NT Workstation 4.0 SP4 Microsoft Windows NT Workstation 4.0 SP3 Microsoft Windows NT Workstation 4.0 SP2 Microsoft Windows NT Workstation 4.0 SP1 Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Terminal Server 4.0 SP6 Microsoft Windows NT Terminal Server 4.0 SP5 Microsoft Windows NT Terminal Server 4.0 SP4 Microsoft Windows NT Terminal Server 4.0 SP3 Microsoft Windows NT Terminal Server 4.0 SP2 Microsoft Windows NT Terminal Server 4.0 SP1 Microsoft Windows NT Terminal Server 4.0 Microsoft Windows NT Server 4.0 SP6a Microsoft Windows NT Server 4.0 SP6 Microsoft Windows NT Server 4.0 SP5 Microsoft Windows NT Server 4.0 SP4 Microsoft Windows NT Server 4.0 SP3 Microsoft Windows NT Server 4.0 SP2 Microsoft Windows NT Server 4.0 SP1 Microsoft Windows NT Server 4.0 Microsoft Windows NT Enterprise Server 4.0 SP6a Microsoft Windows NT Enterprise Server 4.0 SP6 Microsoft Windows NT Enterprise Server 4.0 SP5 Microsoft Windows NT Enterprise Server 4.0 SP4 Microsoft Windows NT Enterprise Server 4.0 SP3 Microsoft Windows NT Enterprise Server 4.0 SP2 Microsoft Windows NT Enterprise Server 4.0 SP1 Microsoft Windows NT Enterprise Server 4.0 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server |
| Not Vulnerable: | |
Discussion
Microsoft Windows 2000 / NT / XP MUP UNC Request Buffer Overflow Vulnerability
The Microsoft Multiple UNC Provider (MUP) driver is used to service Uniform Naming Convention (UNC) requests under some versions of the Windows operating system. An issue has been reported in the handling of UNC requests for files.
Oversized UNP file requests may result in the MUP corrupting data structures related to memory management. When this data is used to allocate or free memory, exploitation may result in arbitrary code being executed with SYSTEM privileges.
Reports state that exploitation is highly dependant on system conditions which are not under the control of a local user. Exploitation may not be reliable, and may require multiple attempts. Failed exploitation may result in a system crash, and require a reboot.
The Microsoft Multiple UNC Provider (MUP) driver is used to service Uniform Naming Convention (UNC) requests under some versions of the Windows operating system. An issue has been reported in the handling of UNC requests for files.
Oversized UNP file requests may result in the MUP corrupting data structures related to memory management. When this data is used to allocate or free memory, exploitation may result in arbitrary code being executed with SYSTEM privileges.
Reports state that exploitation is highly dependant on system conditions which are not under the control of a local user. Exploitation may not be reliable, and may require multiple attempts. Failed exploitation may result in a system crash, and require a reboot.