Microsoft Windows 2000/XP Full Event Log Administrative Alert Weakness

Bugtraq ID:	5972
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	Yes
Published:	Oct 15 2002 12:00AM
Updated:	Oct 15 2002 12:00AM
Credit:	Discovery credited to Eitan Caspi <[email protected]>.
Vulnerable:	Microsoft Windows XP Professional Microsoft Windows XP Home Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server + Avaya DefinityOne Media Servers + Avaya IP600 Media Servers + Avaya S3400 Message Application Server 0 + Avaya S8100 Media Servers 0 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server
Not Vulnerable:	Microsoft Windows XP Professional SP1 Microsoft Windows XP Home SP1 Microsoft Windows 2000 Terminal Services SP3 + Microsoft Windows 2000 Advanced Server SP3 + Microsoft Windows 2000 Datacenter Server SP3 + Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Advanced Server SP3

Microsoft Windows 2000/XP Full Event Log Administrative Alert Weakness

Solution:
This issue was addressed in Windows 2000 service pack 3 and Windows XP service pack 1:


Microsoft Windows 2000 Server SP2

• Microsoft Windows 2000 SP3
  http://www.microsoft.com/windows2000/downloads/servicepacks/sp3/sp3lan g.asp

Microsoft Windows XP Home

• Microsoft Windows XP Service Pack 1
  http://www.microsoft.com/WindowsXP/pro/downloads/servicepacks/sp1/defa ult.asp

Microsoft Windows 2000 Datacenter Server SP2

• Microsoft Windows 2000 SP3
  http://www.microsoft.com/windows2000/downloads/servicepacks/sp3/sp3lan g.asp

Microsoft Windows 2000 Advanced Server SP2

• Microsoft Windows 2000 SP3
  http://www.microsoft.com/windows2000/downloads/servicepacks/sp3/sp3lan g.asp

Microsoft Windows XP Professional

• Microsoft Windows XP Service Pack 1
  http://www.microsoft.com/WindowsXP/pro/downloads/servicepacks/sp1/defa ult.asp

Microsoft Windows 2000 Professional SP2

• Microsoft Windows 2000 SP3
  http://www.microsoft.com/windows2000/downloads/servicepacks/sp3/sp3lan g.asp

Microsoft Windows 2000/XP Full Event Log Administrative Alert Weakness

References:

• Q329350 - Defined Actions for Administrative Alerts Do Not Occur When the Securi (Microsoft)