Microsoft Windows XP/2000/NT 4.0 - Network Share Provider SMB Request Buffer Overflow (2)
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | Microsoft Windows SMB Denial of Service Vulnerabilities in Cisco Products - MS02-045 | 18 Sep 200216:00 | – | cisco |
 | Denial of Service Vulnerabilities in Windows SMB implementation | 1 Jan 197600:00 | – | coresecurity |
 | Microsoft Windows SMB Unchecked Buffer Denial of Service (MS02-045; CVE-2002-0724) | 8 Nov 201100:00 | – | checkpoint_advisories |
 | CVE-2002-0724 | 24 Aug 200204:00 | – | cve |
 | CVE-2002-0724 | 24 Aug 200204:00 | – | cvelist |
 | Microsoft Windows XP/2000/NT 4.0 - Network Share Provider SMB Request Buffer Overflow (1) | 22 Aug 200200:00 | – | exploitdb |
 | Microsoft Windows XP2000NT 4.0 - Network Share Provider SMB Request Buffer Overflow (1) | 22 Aug 200200:00 | – | exploitpack |
 | CVE-2002-0724 | 24 Sep 200204:00 | – | nvd |
 | CORE-20020618: Vulnerabilities in Windows SMB (DoS) | 31 Aug 200200:00 | – | securityvulns |
 | MS02-045: Unchecked buffer in Network Share Provider (326830) | 1 Mar 200300:00 | – | nessus |
10
source: https://www.securityfocus.com/bid/5556/info
Microsoft Windows operating systems use the Server Message Block (SMB) protocol to support services such as file and printer sharing. A buffer overflow vulnerability has been reporting in the handling of some malformed SMB requests.
An attacker may send a malformed SMB request packet in order to exploit this condition. It has been reported possible to corrupt heap memory, leading to a crash of the underlying system.
It may prove possible to exploit this vulnerability to execute arbitrary code and gain local access to the vulnerable system. This possibility has not, however, been confirmed.
Reportedly, this vulnerability may be exploited both as an authenticated user, and with anonymous access to the service.
It has been reported, by "Fabio Pietrosanti \(naif\)" <[email protected]>, that disabling the NetBIOS Null Session will prevent exploitation of this vulnerablity.
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/21747.zipData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
08 Oct 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 27.5
EPSS0.25686