이름	innovation	2006-05-10 09:09:54
제목	Microsoft Windows MSDTC 힙 버퍼 오버플로우 취약점

click="window.open(this.href);return false;">http://www.securityfocus.com/bid/17905Bugtraq ID:  17905   Class:  Boundary Condition Error   CVE:  CVE-2006-1184 Remote:  Yes   Local:  No   Published:  May 09 2006 12:00AM   Updated:  May 09 2006 08:24PM   Credit:  Discovery is credited to Derek Soeder of eEye Digital Security and Kai Zhang of VenusTech.   세부설명 ======== Microsoft Windows Distributed Transaction Coordinator는 원격 힙 버퍼-오버플로우 취약점을 가지고 있다. 이 취약점은 사용자-제공 입력값을 메모리 버퍼에 복사하기전 충분한 경계 검사가 이루어지지 못하기 때문이다. 벤더와 발견자간의 원격 코드 실행가능성에 대한 의견 차이로 인해 해당 BID는 'Conflicting Details' 신뢰 등급으로 매겨져 있다. Microsoft는 이 취약점이 오로지 MSDTC 서비스와 MSDTC에 의존하는 서비스들을 방해하는 데에만 악용되어질 수 있다고 말한다. 이 취약점의 발견자는 원격 코드 실행을 위해 악용되어 질 수 있다고 말한다. 해당 취약점은 Windows NT와 Windows 2000에 기본적으로 영향을 미친다, 왜냐하면 서비스가 기본적으로 활성화되어 있기 때문이다. Windows XP와 Windows Server 2003에서는 서비스가 수동으로 활성화되어 있는 경우에만 영향을 받는다. 해결책 ======== Microsoft는 이 문제를 해결하기 위한 보안 게시물을 발표했다. Microsoft Windows XP Media Center Edition SP2 Microsoft Security Update for Windows XP (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=D80B43B2-727B-46B6-82D1-F2CBD916FE32 Microsoft Windows XP Media Center Edition SP1 Microsoft Security Update for Windows XP (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=D80B43B2-727B-46B6-82D1-F2CBD916FE32 Microsoft Windows Server 2003 Enterprise Edition 64-bit Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=7BD81335-79EA-46CE-8D3C-0AA91EEFFF02 Microsoft Windows Server 2003 Standard Edition Microsoft Security Update for Windows Server 2003 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=E70515C7-8924-46DA-8573-457957EEA0D7 Microsoft Windows Server 2003 Datacenter Edition 64-bit Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=7BD81335-79EA-46CE-8D3C-0AA91EEFFF02 Microsoft Windows Server 2003 Datacenter Edition Microsoft Security Update for Windows Server 2003 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=E70515C7-8924-46DA-8573-457957EEA0D7 Microsoft Windows 2000 Advanced Server SP4 Microsoft Security Update for Windows 2000 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=8B98F380-0E5C-4B80-9710-95E1B35AFD83 Microsoft Windows Server 2003 Enterprise Edition Microsoft Security Update for Windows Server 2003 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=E70515C7-8924-46DA-8573-457957EEA0D7 Microsoft Windows XP Home SP2 Microsoft Security Update for Windows XP (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=D80B43B2-727B-46B6-82D1-F2CBD916FE32 Microsoft Windows 2000 Datacenter Server SP4 Microsoft Security Update for Windows 2000 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=8B98F380-0E5C-4B80-9710-95E1B35AFD83 Microsoft Windows Server 2003 Web Edition Microsoft Security Update for Windows Server 2003 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=E70515C7-8924-46DA-8573-457957EEA0D7 Microsoft Windows XP Home SP1 Microsoft Security Update for Windows XP (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=D80B43B2-727B-46B6-82D1-F2CBD916FE32 Microsoft Windows XP Professional SP2 Microsoft Security Update for Windows XP (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=D80B43B2-727B-46B6-82D1-F2CBD916FE32 Microsoft Windows 2000 Server SP4 Microsoft Security Update for Windows 2000 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=8B98F380-0E5C-4B80-9710-95E1B35AFD83 Microsoft Windows 2000 Professional SP4 Microsoft Security Update for Windows 2000 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=8B98F380-0E5C-4B80-9710-95E1B35AFD83 Microsoft Windows XP Professional SP1 Microsoft Security Update for Windows XP (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=D80B43B2-727B-46B6-82D1-F2CBD916FE32 레퍼런스 ======== Microsoft Distributed Transaction Coordinator Heap Overflow (eEye) Microsoft Security Bulletin MS06-018 (Microsoft) Microsoft Technet Security (Microsoft) 취약버전 ======== Vulnerable:  Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Media Center Edition SP1 Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP2 Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP Embedded SP1 Microsoft Windows XP Embedded Microsoft Windows XP 64-bit Edition Version 2003 SP1 Microsoft Windows XP 64-bit Edition Version 2003 Microsoft Windows XP 64-bit Edition SP1 Microsoft Windows XP 64-bit Edition Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Enterprise Edition 64-bit Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Datacenter Edition 64-bit Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows NT Workstation 4.0 SP6a Microsoft Windows NT Workstation 4.0 SP6 Microsoft Windows NT Workstation 4.0 SP5 Microsoft Windows NT Workstation 4.0 SP4 Microsoft Windows NT Workstation 4.0 SP3 Microsoft Windows NT Workstation 4.0 SP2 Microsoft Windows NT Workstation 4.0 SP1 Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Terminal Server 4.0 SP6a Microsoft Windows NT Terminal Server 4.0 SP6 Microsoft Windows NT Terminal Server 4.0 SP5 Microsoft Windows NT Terminal Server 4.0 SP4 Microsoft Windows NT Terminal Server 4.0 SP3 Microsoft Windows NT Terminal Server 4.0 SP2 Microsoft Windows NT Terminal Server 4.0 SP1 Microsoft Windows NT Terminal Server 4.0 Microsoft Windows NT Server 4.0 SP6a + Avaya DefinityOne Media Servers + Avaya IP600 Media Servers + Avaya S8100 Media Servers Microsoft Windows NT Server 4.0 SP6 Microsoft Windows NT Server 4.0 SP5 Microsoft Windows NT Server 4.0 SP4 Microsoft Windows NT Server 4.0 SP3 Microsoft Windows NT Server 4.0 SP2 Microsoft Windows NT Server 4.0 SP1 Microsoft Windows NT Server 4.0 Microsoft Windows NT Enterprise Server 4.0 SP6a Microsoft Windows NT Enterprise Server 4.0 SP6 Microsoft Windows NT Enterprise Server 4.0 SP5 Microsoft Windows NT Enterprise Server 4.0 SP4 Microsoft Windows NT Enterprise Server 4.0 SP3 Microsoft Windows NT Enterprise Server 4.0 SP2 Microsoft Windows NT Enterprise Server 4.0 SP1 Microsoft Windows NT Enterprise Server 4.0 Microsoft Windows NT 4.0 SP6a + Microsoft Windows NT Enterprise Server 4.0 SP6a + Microsoft Windows NT Server 4.0 SP6a + Microsoft Windows NT Workstation 4.0 SP6a Microsoft Windows NT 4.0 SP6 + Microsoft Windows NT Enterprise Server 4.0 SP6 + Microsoft Windows NT Server 4.0 SP6 + Microsoft Windows NT Terminal Server 4.0 SP6 + Microsoft Windows NT Workstation 4.0 SP6 Microsoft Windows NT 4.0 SP5 + Microsoft Windows NT Enterprise Server 4.0 SP5 + Microsoft Windows NT Server 4.0 SP5 + Microsoft Windows NT Terminal Server 4.0 SP5 + Microsoft Windows NT Workstation 4.0 SP5 Microsoft Windows NT 4.0 SP4 + Microsoft Windows NT Enterprise Server 4.0 SP4 + Microsoft Windows NT Server 4.0 SP4 + Microsoft Windows NT Terminal Server 4.0 SP4 + Microsoft Windows NT Workstation 4.0 SP4 Microsoft Windows NT 4.0 SP3 + Microsoft Windows NT Enterprise Server 4.0 SP3 + Microsoft Windows NT Server 4.0 SP3 + Microsoft Windows NT Terminal Server 4.0 SP3 + Microsoft Windows NT Workstation 4.0 SP3 Microsoft Windows NT 4.0 SP2 + Microsoft Windows NT Enterprise Server 4.0 SP2 + Microsoft Windows NT Server 4.0 SP2 + Microsoft Windows NT Terminal Server 4.0 SP2 + Microsoft Windows NT Workstation 4.0 SP2 Microsoft Windows NT 4.0 SP1 + Microsoft Windows NT Enterprise Server 4.0 SP1 + Microsoft Windows NT Server 4.0 SP1 + Microsoft Windows NT Terminal Server 4.0 SP1 + Microsoft Windows NT Workstation 4.0 SP1 Microsoft Windows NT 4.0 + Microsoft Windows NT Enterprise Server 4.0 + Microsoft Windows NT Server 4.0 + Microsoft Windows NT Terminal Server 4.0 + Microsoft Windows NT Workstation 4.0 Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server + Avaya DefinityOne Media Servers + Avaya IP600 Media Servers + Avaya S3400 Message Application Server + Avaya S8100 Media Servers Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP4 Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server

918	FreeFTPd SFTP 키 교환 알고리즘의 .. [3]	innovation	2006.05.18	2567
917	NewsPortal 원격 PHP 스크립트 코드.. [5]	avy	2006.05.17	1999
916	Sun Java JRE 큰 사이즈의 임시 파일.. [5]	innovation	2006.05.17	2916
915	phpMyAdmin "theme"과 "db"의.. [3]	innovation	2006.05.16	1982
914	RealVNC 패스워드 인증 우회 취약점 [5]	innovation	2006.05.16	3617
913	E107 SQL 인젝션 취약점 [3]	avy	2006.05.15	2803
912	wodSSHServer Key 교환 알고리즘 .. [4]	RiceBox	2006.05.13	1949
911	phpBB 다양한 입력값 검증 취약점들	avy	2006.05.12	727
910	Linux Kernel "lease_init(.. [1]	innovation	2006.05.12	1975
909	Symantec Firewall 제품의 내부 .. [5]	innovation	2006.05.12	2047
908	GNU Strings 서비스 거부 취약점 [1]	innovation	2006.05.12	2023
907	Adobe Dreamweaver Generat.. [4]	avy	2006.05.11	2059
906	Microsoft Windows Path Co..	innovation	2006.05.11	596
905	Microsoft Internet Explor..	innovation	2006.05.11	659
904	Intel PROset/Wireless 로컬 ..	innovation	2006.05.11	599
903	Quake 3 Engine Server 정보 .. [7]	avy	2006.05.10	2618
902	마이크로소프트 인포테크 저장 라이브러리 Hea.. [5]	avy	2006.05.10	1822
901	Microsoft Windows MSDTC I.. [1]	innovation	2006.05.10	2155
900	Microsoft Exchange Server.. [5]	innovation	2006.05.10	6600
899	Microsoft Windows MSDTC 힙.. [2]	innovation	2006.05.10	1823

1 2 3 4 5 6 7 8 9 10

제목 내용 이름