Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2, or (3) NetServerEnum3, aka Unchecked Buffer in Network Share Provider Can Lead to Denial of Service.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_2000 | Microsoft | * | * |
| Windows_nt | Microsoft | 4.0 (including) | 4.0 (including) |
| Windows_nt | Microsoft | 4.0-sp1 (including) | 4.0-sp1 (including) |
| Windows_nt | Microsoft | 4.0-sp2 (including) | 4.0-sp2 (including) |
| Windows_nt | Microsoft | 4.0-sp3 (including) | 4.0-sp3 (including) |
| Windows_nt | Microsoft | 4.0-sp4 (including) | 4.0-sp4 (including) |
| Windows_nt | Microsoft | 4.0-sp5 (including) | 4.0-sp5 (including) |
| Windows_nt | Microsoft | 4.0-sp6 (including) | 4.0-sp6 (including) |
| Windows_nt | Microsoft | 4.0-sp6a (including) | 4.0-sp6a (including) |
| Windows_xp | Microsoft | * | * |
References
- http://marc.info/?l=bugtraq\u0026m=103011556323184\u0026w=2
- http://www.kb.cert.org/vuls/id/250635
- http://www.kb.cert.org/vuls/id/311619
- http://www.kb.cert.org/vuls/id/342243
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-045
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A189
- http://marc.info/?l=bugtraq\u0026m=103011556323184\u0026w=2
- http://www.kb.cert.org/vuls/id/250635
- http://www.kb.cert.org/vuls/id/311619
- http://www.kb.cert.org/vuls/id/342243
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-045
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A189