Nessus Plugin #11413

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Unchecked Buffer in ntdll.dll (Q815021)

Family:

Windows : Microsoft Bulletins

Category:

infos

Copyright:

This script is Copyright (C) 2003 Trevor Hemsley

Summary:

Checks for MS Hotfix Q815021

Version:

$Revision: 1.16 $

Cve_id:

CAN-2003-0109

Bugtraq_id:

7116

Xrefs:

IAVA:2003-A-0005

Description:

The remote host is vulnerable to a flaw in ntdll.dll
which may allow an attacker to gain system privileges,
by exploiting it thru, for instance, WebDAV in IIS5.0
(other services could be exploited, locally and/or remotely)

Note : Microsoft recommends (quoted from advisory) that:
If you have not already applied the MS03-007 patch from
this bulletin, Microsoft recommends you apply the MS03-013
patch as it also corrects an additional vulnerability.

Solution : see http://www.microsoft.com/technet/security/bulletin/ms03-007.mspx
or http://www.microsoft.com/technet/security/bulletin/MS03-013.mspx

Risk factor : High