BID:45271

Microsoft 'Netlogon' RPC Null Pointer Dereference Remote Denial of Service Vulnerability

Info

Microsoft 'Netlogon' RPC Null Pointer Dereference Remote Denial of Service Vulnerability

Bugtraq ID:	45271
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-2742
Remote:	Yes
Local:	No
Published:	Dec 14 2010 12:00AM
Updated:	Dec 14 2010 12:00AM
Credit:	Matthias Dieter Wallnöfer and Andrew Bartlett of The Samba Team.
Vulnerable:	Microsoft Windows Server 2008 R2 Itanium 0 Microsoft Windows Server 2008 for x64-based Systems SP2 Microsoft Windows Server 2008 for x64-based Systems R2 Microsoft Windows Server 2008 for x64-based Systems 0 Microsoft Windows Server 2008 for Itanium-based Systems SP2 Microsoft Windows Server 2008 for Itanium-based Systems R2 Microsoft Windows Server 2008 for 32-bit Systems SP2 Microsoft Windows Server 2008 for 32-bit Systems 0 Microsoft Windows Server 2003 x64 SP2 Microsoft Windows Server 2003 Itanium SP2 3DM Software Disk Management Software SP2

Not Vulnerable:

Discussion

Microsoft 'Netlogon' RPC Null Pointer Dereference Remote Denial of Service Vulnerability

Microsoft Windows is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to restart the affected server, denying service to legitimate users.

NOTE: A remote attacker must have administrator privileges on a machine in the same domain to leverage this issue.

Exploit / POC

Solution / Fix

Microsoft 'Netlogon' RPC Null Pointer Dereference Remote Denial of Service Vulnerability

Solution:
The vendor released an advisory and updates. Please see the references for details.

Microsoft Windows Server 2008 for 32-bit Systems SP2