Microsoft Windows Server 2003 kernel CPU denial of service
| win2k3-kernel-cpu-dos (16582) |  Low Risk |
Description:
Microsoft Windows Server is vulnerable to a denial of service attack. The Windows kernel fails to properly reset certain values within specific CPU data structures. By creating and executing a specially-crafted program, a local attacker could cause the server to stop responding and automatically restart.
Platforms Affected:
- Microsoft, Windows 2003 Server x64
- Microsoft, Windows 2003 Server
Remedy:
Apply the appropriate patch for your system, as listed in Microsoft Security Bulletin MS05-018. See References.
Microsoft originally provided a patch for this vulnerability in MS04-032, but it was superseded by the patch released with MS05-018.
Consequences:
Denial of Service
References:
- CIAC Information Bulletin P-008, Microsoft Security Update for Microsoft Windows (840987) at http://www.ciac.org/ciac/bulletins/p-008.shtml.
- Microsoft Security Bulletin MS04-032, Security Update for Microsoft Windows (840987) at http://www.microsoft.com/technet/security/bulletin/ms04-032.mspx.
- Microsoft Security Bulletin MS05-018, Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege and Denial of Service (890859) at http://www.microsoft.com/technet/security/bulletin/MS05-018.mspx.
- BID-11365: Microsoft Windows Kernel Local Denial of Service Vulnerability
- CVE-2004-0211: The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service (system crash) via a malicious program.
- US-CERT VU#119262: Microsoft Windows kernel fails to reset values in CPU data structures
Reported:
Oct 12, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net