NT Master File Table Corruption Vulnerability
BID:609
Info
NT Master File Table Corruption Vulnerability
| Bugtraq ID: | 609 |
| Class: | Unknown |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 23 1999 12:00AM |
| Updated: | Aug 23 1999 12:00AM |
| Credit: | |
| Vulnerable: |
Microsoft Windows NT 4.0 SP5 Microsoft Windows NT 4.0 SP4 Microsoft Windows NT 4.0 SP3 Microsoft Windows NT 4.0 SP2 Microsoft Windows NT 4.0 SP1 Microsoft Windows NT 4.0 |
| Not Vulnerable: | |
Discussion
NT Master File Table Corruption Vulnerability
The Master File Table (MFT) of an NT 4 host may show signs of corruption after it has grown larger than 4 Gig. Corruption may include: presence of formerly deleted files, disappearance of non-deleted files, and warning messages about corruption that recommend running CHKDSK. The MFT may grow larger than 4 Gig if there are more than 4 million files on the host.
The Master File Table (MFT) of an NT 4 host may show signs of corruption after it has grown larger than 4 Gig. Corruption may include: presence of formerly deleted files, disappearance of non-deleted files, and warning messages about corruption that recommend running CHKDSK. The MFT may grow larger than 4 Gig if there are more than 4 million files on the host.
Exploit / POC
NT Master File Table Corruption Vulnerability
see discussion
see discussion
Solution / Fix
NT Master File Table Corruption Vulnerability
Solution:
Microsoft has issues a post-SP5 hotfix to correct this problem. It can be obtained at:
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP5/NTFS-fix
Solution:
Microsoft has issues a post-SP5 hotfix to correct this problem. It can be obtained at:
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP5/NTFS-fix
References
NT Master File Table Corruption Vulnerability
References:
References: