 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| Test ID: | 1.3.6.1.4.1.25623.1.0.11888 |
| Category: | Windows : Microsoft Bulletins |
| Title: | Buffer Overrun in Messenger Service (828035) |
| Summary: | A security vulnerability exists in the Messenger Service that could allow; arbitrary code execution on an affected system.;; This plugin determined by reading the remote registry that the patch MS03-043 has not been applied. |
| Description: | Summary: A security vulnerability exists in the Messenger Service that could allow arbitrary code execution on an affected system. This plugin determined by reading the remote registry that the patch MS03-043 has not been applied. Vulnerability Impact: An attacker who successfully exploited this vulnerability could be able to run code with Local System privileges on an affected system, or could cause the Messenger Service to fail. Disabling the Messenger Service will prevent the possibility of attack. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P |
| Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2003-0717 BugTraq ID: 8826 http://www.securityfocus.com/bid/8826 Bugtraq: 20031016 MS03-043 Popup Messenger Servce buffer-overflow (Google Search) http://marc.info/?l=ntbugtraq&m=106632188709562&w=2 Bugtraq: 20031018 Proof of concept for Windows Messenger Service overflow (Google Search) http://marc.info/?l=bugtraq&m=106666713812158&w=2 http://www.cert.org/advisories/CA-2003-27.html CERT/CC vulnerability note: VU#575892 http://www.kb.cert.org/vuls/id/575892 Microsoft Security Bulletin: MS03-043 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-043 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A213 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A268 |
| Copyright | Copyright (C) 2003 Jeff Adams |
| This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |