BID:8087

Microsoft Windows Security Accounts Manager API Denial Of Service Vulnerability

Info

Microsoft Windows Security Accounts Manager API Denial Of Service Vulnerability

Bugtraq ID:	8087
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jun 26 2003 12:00AM
Updated:	Jun 26 2003 12:00AM
Credit:	This issue was announced by the vendor.
Vulnerable:	Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server + Avaya DefinityOne Media Servers + Avaya IP600 Media Servers + Avaya S3400 Message Application Server 0 + Avaya S8100 Media Servers 0 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server

Not Vulnerable:	Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Advanced Server SP4

Discussion

Microsoft Windows Security Accounts Manager API Denial Of Service Vulnerability

Microsoft Windows 2000 Security Accounts Manager (SAM) has been reported by the vendor to be prone to denial of service attacks. This is due to a flaw in two SAM APIs that could permit a malicious user to cause a vulnerable system to stop servicing client access requests.

This issue was announced by Microsoft with the release of Windows 2000 SP4 and has been addressed in this service pack.

Exploit / POC

Microsoft Windows Security Accounts Manager API Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Microsoft Windows Security Accounts Manager API Denial Of Service Vulnerability

Solution:
This issue has been addressed in Windows 2000 SP4. Administrators should upgrade to SP4 at the earliest possible convenience. Windows 2000 Datacenter users should upgrade only if it is in conjunction with their OEM.

Please see the documentation provided by Microsoft for instructions on how to upgrade and to determine the applicability of upgrading to SP4.

Microsoft Windows 2000 Professional