Microsoft Content Management Server 2001 User Authentication Buffer Overflow Vulnerability
BID:5420
Info
Microsoft Content Management Server 2001 User Authentication Buffer Overflow Vulnerability
| Bugtraq ID: | 5420 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 07 2002 12:00AM |
| Updated: | Aug 07 2002 12:00AM |
| Credit: | Discovery of this issue is credited to Joao Gouveia <[email protected]>. |
| Vulnerable: |
Microsoft Content Management Server 2001 SP1 Microsoft Content Management Server 2001 |
| Not Vulnerable: | |
Discussion
Microsoft Content Management Server 2001 User Authentication Buffer Overflow Vulnerability
A remotely exploitable buffer overflow condition was reported in the low-level MCMS Authentication Operation function.
At least one webpage that ships with the product contains an exposure to the vulnerable user authentication function, and may allow attackers to exploit the condition. Any created webpages which include authentication and a call to the vulnerable function may also be prone to this vulnerability.
This may be exploited by a remote attacker to execute arbitrary instructions in the Local System context or potentially create a denial of service condition.
A remotely exploitable buffer overflow condition was reported in the low-level MCMS Authentication Operation function.
At least one webpage that ships with the product contains an exposure to the vulnerable user authentication function, and may allow attackers to exploit the condition. Any created webpages which include authentication and a call to the vulnerable function may also be prone to this vulnerability.
This may be exploited by a remote attacker to execute arbitrary instructions in the Local System context or potentially create a denial of service condition.
Solution / Fix
Microsoft Content Management Server 2001 User Authentication Buffer Overflow Vulnerability
Solution:
Microsoft has issued a patch for this issue:
Microsoft Content Management Server 2001
Microsoft Content Management Server 2001 SP1
Solution:
Microsoft has issued a patch for this issue:
Microsoft Content Management Server 2001
-
Microsoft mcms2001srp1.exe
http://download.microsoft.com/download/contentmanagementser/SP/1.0/NT5 /EN-US/mcms2001srp1.exe
Microsoft Content Management Server 2001 SP1
-
Microsoft mcms2001srp1.exe
http://download.microsoft.com/download/contentmanagementser/SP/1.0/NT5 /EN-US/mcms2001srp1.exe