Microsoft Windows Invalid IGMP Header DoS Vulnerability
BID:514
Info
Microsoft Windows Invalid IGMP Header DoS Vulnerability
| Bugtraq ID: | 514 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jul 03 1999 12:00AM |
| Updated: | Jul 03 1999 12:00AM |
| Credit: | This vulnerability was published in the Butraq mailing list by klepto <[email protected]>. Additional commentary and a second exploit was posted by coolio <[email protected]>. Third exploit posted by klepto <[email protected]>. Additional research into |
| Vulnerable: |
Microsoft Windows NT Workstation 4.0 SP5 Microsoft Windows NT Workstation 4.0 SP4 Microsoft Windows NT Workstation 4.0 SP3 Microsoft Windows NT Workstation 4.0 SP2 Microsoft Windows NT Workstation 4.0 SP1 Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Terminal Server 4.0 SP4 Microsoft Windows NT Terminal Server 4.0 SP3 Microsoft Windows NT Terminal Server 4.0 SP2 Microsoft Windows NT Terminal Server 4.0 SP1 Microsoft Windows NT Terminal Server 4.0 Microsoft Windows NT Server 4.0 SP5 Microsoft Windows NT Server 4.0 SP4 Microsoft Windows NT Server 4.0 SP3 Microsoft Windows NT Server 4.0 SP2 Microsoft Windows NT Server 4.0 SP1 Microsoft Windows NT Server 4.0 Microsoft Windows NT Enterprise Server 4.0 SP5 Microsoft Windows NT Enterprise Server 4.0 SP4 Microsoft Windows NT Enterprise Server 4.0 SP3 Microsoft Windows NT Enterprise Server 4.0 SP2 Microsoft Windows NT Enterprise Server 4.0 SP1 Microsoft Windows NT Enterprise Server 4.0 Microsoft Windows 98 Microsoft Windows 95 |
| Not Vulnerable: | |
Discussion
Microsoft Windows Invalid IGMP Header DoS Vulnerability
The Windows 98 and Windows 2000 TCP/IP stacks were not built to reliably tolerate malformed IGMP headers. When one is received, the stack will sometimes fail with unpredictable results ranging from a Blue Screen to instantaneous reboot.
The Windows 98 and Windows 2000 TCP/IP stacks were not built to reliably tolerate malformed IGMP headers. When one is received, the stack will sometimes fail with unpredictable results ranging from a Blue Screen to instantaneous reboot.
Exploit / POC
Microsoft Windows Invalid IGMP Header DoS Vulnerability
There were three exploits posted to Bugtraq within 48 hours for this. They are all included here, in chronological order.
There were three exploits posted to Bugtraq within 48 hours for this. They are all included here, in chronological order.
Solution / Fix
Microsoft Windows Invalid IGMP Header DoS Vulnerability
Solution:
Microsoft has released a series of patches, available at:
Windows 95: Patches are available via Windows Update
Windows 98: http://www.microsoft.com/windows98/downloads/corporate.asp
The following fixes are available:
Microsoft Windows NT Enterprise Server 4.0
Microsoft Windows NT Terminal Server 4.0 SP1
Microsoft Windows NT Enterprise Server 4.0 SP2
Microsoft Windows NT Server 4.0 SP3
Microsoft Windows NT Terminal Server 4.0
Microsoft Windows NT Terminal Server 4.0 SP3
Microsoft Windows NT Enterprise Server 4.0 SP3
Microsoft Windows NT Server 4.0 SP1
Microsoft Windows NT Workstation 4.0 SP5
Microsoft Windows NT Workstation 4.0
Microsoft Windows NT Enterprise Server 4.0 SP4
Microsoft Windows NT Workstation 4.0 SP2
Microsoft Windows NT Server 4.0
Microsoft Windows NT Enterprise Server 4.0 SP5
Microsoft Windows NT Workstation 4.0 SP3
Microsoft Windows NT Workstation 4.0 SP4
Microsoft Windows NT Terminal Server 4.0 SP2
Microsoft Windows NT Terminal Server 4.0 SP4
Microsoft Windows NT Server 4.0 SP5
Microsoft Windows NT Server 4.0 SP2
Microsoft Windows NT Workstation 4.0 SP1
Microsoft Windows NT Enterprise Server 4.0 SP1
Microsoft Windows NT Server 4.0 SP4
Solution:
Microsoft has released a series of patches, available at:
Windows 95: Patches are available via Windows Update
Windows 98: http://www.microsoft.com/windows98/downloads/corporate.asp
The following fixes are available:
Microsoft Windows NT Enterprise Server 4.0
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Terminal Server 4.0 SP1
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40TSE/ho tfixes-postSP4/IGMP-fix/
Microsoft Windows NT Enterprise Server 4.0 SP2
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Server 4.0 SP3
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Terminal Server 4.0
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40TSE/ho tfixes-postSP4/IGMP-fix/
Microsoft Windows NT Terminal Server 4.0 SP3
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40TSE/ho tfixes-postSP4/IGMP-fix/
Microsoft Windows NT Enterprise Server 4.0 SP3
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Server 4.0 SP1
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Workstation 4.0 SP5
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Workstation 4.0
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Enterprise Server 4.0 SP4
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Workstation 4.0 SP2
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Server 4.0
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Enterprise Server 4.0 SP5
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Workstation 4.0 SP3
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Workstation 4.0 SP4
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Terminal Server 4.0 SP2
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40TSE/ho tfixes-postSP4/IGMP-fix/
Microsoft Windows NT Terminal Server 4.0 SP4
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40TSE/ho tfixes-postSP4/IGMP-fix/
Microsoft Windows NT Server 4.0 SP5
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Server 4.0 SP2
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Workstation 4.0 SP1
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Enterprise Server 4.0 SP1
-
Microsoft Q238329
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfi xes-postsp5/igmp-fix/
Microsoft Windows NT Server 4.0 SP4
References
Microsoft Windows Invalid IGMP Header DoS Vulnerability
References:
References: