جزئیات آسیب‌پذیری

خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."

• http://secunia.com/advisories/32326 third-party-advisoryx_refsource_SECUNIA
• http://www.kb.cert.org/vuls/id/827267 third-party-advisoryx_refsource_CERT-VN
• http://www.securitytracker.com/id?1021091 vdb-entryx_refsource_SECTRACK
• https://www.exploit-db.com/exploits/7132 exploitx_refsource_EXPLOIT-DB
• https://www.exploit-db.com/exploits/6841 exploitx_refsource_EXPLOIT-DB
• http://www.securityfocus.com/bid/31874 vdb-entryx_refsource_BID
• http://marc.info/?l=bugtraq&m=122703006921213&w=2 vendor-advisoryx_refsource_HP
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067 vendor-advisoryx_refsource_MS
• http://blogs.securiteam.com/index.php/archives/1150 x_refsource_MISC
• https://www.exploit-db.com/exploits/6824 exploitx_refsource_EXPLOIT-DB
• http://www.vupen.com/english/advisories/2008/2902 vdb-entryx_refsource_VUPEN
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46040 vdb-entryx_refsource_XF
• http://www.securityfocus.com/archive/1/497808/100/0/threaded mailing-listx_refsource_BUGTRAQ
• http://www.us-cert.gov/cas/techalerts/TA08-297A.html third-party-advisoryx_refsource_CERT
• https://www.exploit-db.com/exploits/7104 exploitx_refsource_EXPLOIT-DB
• http://www.us-cert.gov/cas/techalerts/TA09-088A.html third-party-advisoryx_refsource_CERT
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6093 vdb-entrysignaturex_refsource_OVAL
• http://www.securityfocus.com/archive/1/497816/100/0/threaded mailing-listx_refsource_BUGTRAQ
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-4250 government-resource