MSDTC network message denial of service
| msdtc-message-dos (25558) |  Medium Risk |
Description:
The Microsoft Distributed Transaction Service Coordinator (MSDTC) installed on Microsoft Windows is vulnerable to a denial of service attack, caused by a buffer overflow in the MSDTC service. By sending a specially-crafted network message to the system, a remote attacker could overflow a buffer and cause the MSDTC service to stop responding.
Consequences:
Denial of Service
Remedy:
Apply the appropriate patch for your system, as listed in Microsoft Security Bulletin MS06-018. See References.
References:
- eEye Digital Security Advisory AD20060509a: Microsoft Distributed Transaction Coordinator Heap Overflow.
- Microsoft Security Bulletin MS06-018: Vulnerability in Microsoft Distributed Transaction Coordinator Could Lead to Denial of Service (913580).
- ASA-2006-099: Windows Security Updates for May 2006 - (MS06-018 - MS06-020)
- BID-17905: Microsoft Windows MSDTC Heap Buffer Overflow Vulnerability
- CVE-2006-1184: Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability. NOTE: this is a variant of CVE-2005-2119.
- OSVDB ID: 25336: Microsoft Windows Distributed Transaction Coordinator (DTC) BuildContextW Request DoS
- SA20000: Microsoft Distributed Transaction Coordinator Two Vulnerabilities
- SECTRACK ID: 1016047: Microsoft Distributed Transaction Coordinator Bugs Let Remote Users Deny Service
- VUPEN/ADV-2006-1742: Microsoft Windows Distributed Transaction Coordinator Multiple Vulnerabilities (MS06-018)
Platforms Affected:
- Microsoft Windows 2000 SP4
- Microsoft Windows 2003
- Microsoft Windows 2003 Server SP1 Itanium
- Microsoft Windows 2003 Server Itanium
- Microsoft Windows XP SP2
- Microsoft Windows XP SP1
Reported:
May 09, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net