Vulnerability Note VU#250635
Microsoft Windows Server Message Block (SMB) fails to properly handle SMB_COM_TRANSACTION packets requesting NetServerEnum2 transaction
Microsoft Server Message Block (SMB) may crash when it receives a crafted SMB_COM_TRANSACTION packet requesting a NetServerEnum2 transaction. Attackers can use this vulnerability to cause a denial of service.
SMB is a protocol for sharing data and resources between computers. It is included in many versions of Microsoft Windows.
SMB will crash if it receives a crafted SMB_COM_TRANSACTION packet requesting a NetServerEnum2 transaction. If either the 'Max Param Count' field or the 'Max Data Count' field of the packet is set to zero (0), the destination SMB host will crash with a blue screen. This vulnerability can be exploited by both local and remote attackers.
Remote attackers can cause a denial of service. Attackers may also be able to execute arbitrary code, though this has not been demonstrated or proven.
Apply a patch
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Microsoft Corporation||Affected||15 Jul 2002||23 Aug 2002|
CVSS Metrics (Learn More)
Thanks to Ivan Arce for reporting this vulnerability.
This document was written by Shawn Van Ittersum.
- CVE IDs: CAN-2002-0724
- Date Public: 22 Aug 2002
- Date First Published: 23 Aug 2002
- Date Last Updated: 19 Aug 2003
- Severity Metric: 5.02
- Document Revision: 16
If you have feedback, comments, or additional information about this vulnerability, please send us email.