MajorRev: v2.0 Microsoft Security Bulletin MS04-020 - Vulnerability in POSIX Could Allow Code Execution (841872)

From: Russ Cooper (Russ.Cooper_at_TRUSECURE.CA)
Date: 08/10/04

  • Next message: Russ Cooper: "MinorRev: Microsoft Security Bulletin MS04-021 - Security Update for IIS 4.0 (841373)" 
    Date:         Tue, 10 Aug 2004 13:28:21 -0400
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    Microsoft Security Bulletin MS04-020:
    Vulnerability in POSIX Could Allow Code Execution (841872)

    Bulletin URL:
    <http://www.microsoft.com/technet/security/bulletin/MS04-020.mspx>

    Reason for Revision: Updated to reflect an additional affected product - Microsoft INTERIX 2.2
    Version Number: 2.0
    Issued Date: Tuesday, July 13, 2004
    Revision Date: Tuesday, August 10, 2004
    Impact of Vulnerability: Local Elevation of Privilege
    Maximum Severity Rating: Important
    Patch(es) Replaced: None
    Caveats: None

    Tested Software:
    Affected Software:
    ------------------
    * Microsoft INTERIX. 2.2
    <http://tinyurl.com/4k9u9>
    * Microsoft Windows NT. Workstation 4.0 Service Pack 6a
    <http://tinyurl.com/4dpou>
    * Microsoft Windows NT Server 4.0 Service Pack 6a
    <http://tinyurl.com/59vkv>
    * Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6
    <http://tinyurl.com/72adx>
    * Microsoft Windows 2000 Service Pack 2, Microsoft Windows 2000 Service Pack 3, Microsoft Windows 2000 Service Pack 4
    <http://tinyurl.com/3hph2>

    Technical Description:
    ----------------------
    * POSIX Vulnerability - CAN-2004-0210 A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.

    Revision History:
    -----------------
    * v1.0 - 7/13/2004: Bulletin published
    * v2.0 - 8/10/2004: Updated to reflect an additional affected product - Microsoft INTERIX 2.2

    This email is sent to NTBugtraq automagically as a service to my subscribers. (v4.01.1664.40858)

    Cheers,
    Russ - Senior Scientist - TruSecure Corporation/NTBugtraq Editor

    -----
    NTBugtraq Editor's Note:

    Want to reply to the person who sent this message? This list is configured such that just hitting reply is going to result in the message coming to the list, not to the individual who sent the message. This was done to help reduce the number of Out of Office messages posters received. So if you want to send a reply just to the poster, you'll have to copy their email address out of the message and place it in your TO: field.
    -----

  • Next message: Russ Cooper: "MinorRev: Microsoft Security Bulletin MS04-021 - Security Update for IIS 4.0 (841373)"

    Relevant Pages

    • SecurityFocus Microsoft Newsletter #176
      ... MICROSOFT VULNERABILITY SUMMARY ... Microsoft Windows XP HCP URI Handler Arbitrary Command Execu... ... PHPNuke Category Parameter SQL Injection Vulnerability ... Microsoft Baseline Security Analyzer Vulnerability Identific... ...
      (Focus-Microsoft)
    • SecurityFocus Microsoft Newsletter #83
      ... MICROSOFT VULNERABILITY SUMMARY ... Microsoft IIS CodeBrws.ASP Source Code Disclosure Vulnerability ... Microsoft Internet Explorer History List Script Injection ... Microsoft Windows 2000 Lanman Denial of Service Vulnerability ...
      (Focus-Microsoft)
    • SecurityFocus Microsoft Newsletter #81
      ... MICROSOFT VULNERABILITY SUMMARY ... WWWIsis Remote Command Execution Vulnerability ... Windows NT 4.0 Print Spooler Security ...
      (Focus-Microsoft)
    • SecurityFocus Microsoft Newsletter #185
      ... NEW MICROSOFT VULNERABILITIES - Audit Your Network Security ... SurgeLDAP User.CGI Directory Traversal Vulnerability ... Microsoft Windows H.323 Remote Buffer Overflow Vulnerability ... Microsoft Jet Database Engine Remote Code Execution Vulnerab... ...
      (Focus-Microsoft)
    • SecurityFocus Microsoft Newsletter #336
      ... MICROSOFT VULNERABILITY SUMMARY ... Microsoft Windows Unspecified Remote Code Execution Vulnerability ... Microsoft Windows Explorer BMP Image Denial of Service Vulnerability ... An attacker could leverage this issue to have arbitrary code execute with kernel level privileges. ...
      (Focus-Microsoft)