Windows rshd buffer overflow

2007-08-03T00:00:00
ID SAINT:DA6B6A8A6569AFFDA323D43568DB240F
Type saint
Reporter SAINT Corporation
Modified 2007-08-03T00:00:00

Description

Added: 08/03/2007
CVE: CVE-2007-4006
BID: 25044
OSVDB: 38572

Background

The Windows implementation of RSHD is a remote shell daemon which has been adapted to run on Windows platforms.

Problem

A buffer overflow vulnerability in the Windows implementation of RSHD allows remote attackers to execute arbitrary commands.

Resolution

Disable the rshd service, or upgrade to a version higher than 1.8 when available.

References

<http://www.securityfocus.com/bid/25044>

Platforms

Windows NT
Windows 2000
Windows XP SP0
Windows XP SP1
Windows XP SP2 / Windows XP
Windows Server 2003