이름	innovation	2006-05-10 09:11:11
제목	Microsoft Windows MSDTC Invalid Memory Access 서비스 거부 취약점

click="window.open(this.href);return false;">http://www.securityfocus.com/bid/17906Bugtraq ID:  17906   Class:  Failure to Handle Exceptional Conditions   CVE:  CVE-2006-0034 Remote:  Yes   Local:  No   Published:  May 09 2006 12:00AM   Updated:  May 09 2006 08:24PM   Credit:  Discovery is credited to Derek Soeder of eEye Digital Security and Xiao Chen of McAfee.   세부설명 ======== Microsoft Windows Distributed Transaction Coordinator은 서비스-거부 취약점을 가지고 있다. 이 취약점은 MSDTC 서비스와, MSDTC에 의존한 모든 서비스를 방해하기 위해 원격에서 악용되어질 수 있다. 취약점은 Windows NT와 Windows 2000에 기본적으로 영향을 미친다, 왜냐하면 서비스가 기본적으로 활성화되어 있기 때문이다. Windows XP와 Windows Server 2003에서는 서비스가 수동으로 활성화되어 있는 경우에만 영향을 미친다. 해결책 ======== Microsoft는 해당 취약점을 해결하기 위한 보안 게시물을 발표했다. Microsoft Windows XP Tablet PC Edition SP1 Microsoft Security Update for Windows XP (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=D80B43B2-727B -46B6-82D1-F2CBD916FE32 Microsoft Windows XP Media Center Edition SP1 Microsoft Security Update for Windows XP (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=D80B43B2-727B -46B6-82D1-F2CBD916FE32 Microsoft Windows Server 2003 Enterprise Edition 64-bit Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=7BD81335-79EA -46CE-8D3C-0AA91EEFFF02 Microsoft Windows Server 2003 Standard Edition Microsoft Security Update for Windows Server 2003 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=E70515C7-8924 -46DA-8573-457957EEA0D7 Microsoft Windows Server 2003 Datacenter Edition 64-bit Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=7BD81335-79EA -46CE-8D3C-0AA91EEFFF02 Microsoft Windows Server 2003 Datacenter Edition Microsoft Security Update for Windows Server 2003 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=E70515C7-8924 -46DA-8573-457957EEA0D7 Microsoft Windows 2000 Advanced Server SP4 Microsoft Security Update for Windows 2000 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=8B98F380-0E5C -4B80-9710-95E1B35AFD83 Microsoft Windows Server 2003 Enterprise Edition Microsoft Security Update for Windows Server 2003 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=E70515C7-8924 -46DA-8573-457957EEA0D7 Microsoft Windows 2000 Datacenter Server SP4 Microsoft Security Update for Windows 2000 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=8B98F380-0E5C -4B80-9710-95E1B35AFD83 Microsoft Windows Server 2003 Web Edition Microsoft Security Update for Windows Server 2003 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=E70515C7-8924 -46DA-8573-457957EEA0D7 Microsoft Windows XP Home SP1 Microsoft Security Update for Windows XP (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=D80B43B2-727B -46B6-82D1-F2CBD916FE32 Microsoft Windows 2000 Server SP4 Microsoft Security Update for Windows 2000 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=8B98F380-0E5C -4B80-9710-95E1B35AFD83 Microsoft Windows 2000 Professional SP4 Microsoft Security Update for Windows 2000 (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=8B98F380-0E5C -4B80-9710-95E1B35AFD83 Microsoft Windows XP Professional SP1 Microsoft Security Update for Windows XP (KB913580) http://www.microsoft.com/downloads/details.aspx?familyid=D80B43B2-727B -46B6-82D1-F2CBD916FE32 레퍼런스 ======== Microsoft Distributed Transaction Coordinator Denial of Service (eEye) Microsoft Security Bulletin MS06-018 (Microsoft) Microsoft Technet Security (Microsoft) 취약버전 ======== Vulnerable:  Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition SP1 Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP Embedded SP1 Microsoft Windows XP Embedded Microsoft Windows XP 64-bit Edition Version 2003 SP1 Microsoft Windows XP 64-bit Edition Version 2003 Microsoft Windows XP 64-bit Edition SP1 Microsoft Windows XP 64-bit Edition Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Enterprise Edition 64-bit Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Datacenter Edition 64-bit Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows NT Workstation 4.0 SP6a Microsoft Windows NT Workstation 4.0 SP6 Microsoft Windows NT Workstation 4.0 SP5 Microsoft Windows NT Workstation 4.0 SP4 Microsoft Windows NT Workstation 4.0 SP3 Microsoft Windows NT Workstation 4.0 SP2 Microsoft Windows NT Workstation 4.0 SP1 Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Terminal Server 4.0 SP6a Microsoft Windows NT Terminal Server 4.0 SP6 Microsoft Windows NT Terminal Server 4.0 SP5 Microsoft Windows NT Terminal Server 4.0 SP4 Microsoft Windows NT Terminal Server 4.0 SP3 Microsoft Windows NT Terminal Server 4.0 SP2 Microsoft Windows NT Terminal Server 4.0 SP1 Microsoft Windows NT Terminal Server 4.0 Microsoft Windows NT Server 4.0 SP6a + Avaya DefinityOne Media Servers + Avaya IP600 Media Servers + Avaya S8100 Media Servers Microsoft Windows NT Server 4.0 SP6 Microsoft Windows NT Server 4.0 SP5 Microsoft Windows NT Server 4.0 SP4 Microsoft Windows NT Server 4.0 SP3 Microsoft Windows NT Server 4.0 SP2 Microsoft Windows NT Server 4.0 SP1 Microsoft Windows NT Server 4.0 Microsoft Windows NT Enterprise Server 4.0 SP6a Microsoft Windows NT Enterprise Server 4.0 SP6 Microsoft Windows NT Enterprise Server 4.0 SP5 Microsoft Windows NT Enterprise Server 4.0 SP4 Microsoft Windows NT Enterprise Server 4.0 SP3 Microsoft Windows NT Enterprise Server 4.0 SP2 Microsoft Windows NT Enterprise Server 4.0 SP1 Microsoft Windows NT Enterprise Server 4.0 Microsoft Windows NT 4.0 SP6a + Microsoft Windows NT Enterprise Server 4.0 SP6a + Microsoft Windows NT Server 4.0 SP6a + Microsoft Windows NT Workstation 4.0 SP6a Microsoft Windows NT 4.0 SP6 + Microsoft Windows NT Enterprise Server 4.0 SP6 + Microsoft Windows NT Server 4.0 SP6 + Microsoft Windows NT Terminal Server 4.0 SP6 + Microsoft Windows NT Workstation 4.0 SP6 Microsoft Windows NT 4.0 SP5 + Microsoft Windows NT Enterprise Server 4.0 SP5 + Microsoft Windows NT Server 4.0 SP5 + Microsoft Windows NT Terminal Server 4.0 SP5 + Microsoft Windows NT Workstation 4.0 SP5 Microsoft Windows NT 4.0 SP4 + Microsoft Windows NT Enterprise Server 4.0 SP4 + Microsoft Windows NT Server 4.0 SP4 + Microsoft Windows NT Terminal Server 4.0 SP4 + Microsoft Windows NT Workstation 4.0 SP4 Microsoft Windows NT 4.0 SP3 + Microsoft Windows NT Enterprise Server 4.0 SP3 + Microsoft Windows NT Server 4.0 SP3 + Microsoft Windows NT Terminal Server 4.0 SP3 + Microsoft Windows NT Workstation 4.0 SP3 Microsoft Windows NT 4.0 SP2 + Microsoft Windows NT Enterprise Server 4.0 SP2 + Microsoft Windows NT Server 4.0 SP2 + Microsoft Windows NT Terminal Server 4.0 SP2 + Microsoft Windows NT Workstation 4.0 SP2 Microsoft Windows NT 4.0 SP1 + Microsoft Windows NT Enterprise Server 4.0 SP1 + Microsoft Windows NT Server 4.0 SP1 + Microsoft Windows NT Terminal Server 4.0 SP1 + Microsoft Windows NT Workstation 4.0 SP1 Microsoft Windows NT 4.0 + Microsoft Windows NT Enterprise Server 4.0 + Microsoft Windows NT Server 4.0 + Microsoft Windows NT Terminal Server 4.0 + Microsoft Windows NT Workstation 4.0 Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server + Avaya DefinityOne Media Servers + Avaya IP600 Media Servers + Avaya S3400 Message Application Server + Avaya S8100 Media Servers Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP4 Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server

918	FreeFTPd SFTP 키 교환 알고리즘의 .. [3]	innovation	2006.05.18	2576
917	NewsPortal 원격 PHP 스크립트 코드.. [5]	avy	2006.05.17	2004
916	Sun Java JRE 큰 사이즈의 임시 파일.. [5]	innovation	2006.05.17	2920
915	phpMyAdmin "theme"과 "db"의.. [3]	innovation	2006.05.16	1987
914	RealVNC 패스워드 인증 우회 취약점 [5]	innovation	2006.05.16	3624
913	E107 SQL 인젝션 취약점 [3]	avy	2006.05.15	2810
912	wodSSHServer Key 교환 알고리즘 .. [4]	RiceBox	2006.05.13	1956
911	phpBB 다양한 입력값 검증 취약점들	avy	2006.05.12	727
910	Linux Kernel "lease_init(.. [1]	innovation	2006.05.12	1982
909	Symantec Firewall 제품의 내부 .. [5]	innovation	2006.05.12	2053
908	GNU Strings 서비스 거부 취약점 [1]	innovation	2006.05.12	2030
907	Adobe Dreamweaver Generat.. [4]	avy	2006.05.11	2068
906	Microsoft Windows Path Co..	innovation	2006.05.11	596
905	Microsoft Internet Explor..	innovation	2006.05.11	659
904	Intel PROset/Wireless 로컬 ..	innovation	2006.05.11	599
903	Quake 3 Engine Server 정보 .. [7]	avy	2006.05.10	2624
902	마이크로소프트 인포테크 저장 라이브러리 Hea.. [5]	avy	2006.05.10	1829
901	Microsoft Windows MSDTC I.. [1]	innovation	2006.05.10	2161
900	Microsoft Exchange Server.. [5]	innovation	2006.05.10	6609
899	Microsoft Windows MSDTC 힙.. [2]	innovation	2006.05.10	1829

1 2 3 4 5 6 7 8 9 10

제목 내용 이름