Microsoft Windows LSASS服务ISAKMP消息远程拒绝服务漏洞（MS09-069）

BUGTRAQ ID: 37218 CVE ID: CVE-2009-3675 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统上的本地安全权威子系统服务（LSASS）没有正确地处理特制的ISAKMP消息，如果通过认证的远程攻击者在通过IPSEC协议与受影响系统上的LSASS通讯期间发送了特制的ISAKMP消息，就可以耗尽系统资源。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows 2000...

CVE-2009-3675

LSASS.exe in the Local Security Authority Subsystem Service LSASS in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote authenticated users to cause a denial of service CPU consumption via a malformed ISAKMP request over IPsec, aka "Local Security Authority Subsystem...

Design/Logic Flaw

LSASS.exe in the Local Security Authority Subsystem Service LSASS in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote authenticated users to cause a denial of service CPU consumption via a malformed ISAKMP request over IPsec, aka "Local Security Authority Subsystem...

CVE-2009-3675

LSASS.exe in the Local Security Authority Subsystem Service LSASS in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote authenticated users to cause a denial of service CPU consumption via a malformed ISAKMP request over IPsec, aka "Local Security Authority Subsystem...

CVE-2009-3675

CVE-2009-3675 describes a denial-of-service vulnerability in Windows LSASS (Local Security Authority Subsystem Service) where remote authenticated attackers can exhaust CPU resources by sending specially crafted ISAKMP messages over IPsec. Affected: Windows 2000 SP4, XP SP2/SP3, and Server 2003 S...

Microsoft Windows DoS

LSASS DoS on ISAKMP IPSec messages parsing...

Microsoft Windows LSASS Denial of Service Vulnerability (975467)

This host is missing a critical security update according to Microsoft Bulletin MS09-069. OpenVAS Vulnerability Test $Id: secpodms09-069.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Windows LSASS Denial of Service Vulnerability 974392 Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...

Microsoft Security Bulletin MS09-069 - Important Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service (974392)

Microsoft Security Bulletin MS09-069 - Important Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service 974392 Published: December 08, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in...

Microsoft Windows LSASS Denial of Service Vulnerability (975467)

This host is missing a critical security update according to Microsoft Bulletin MS09-069. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Inside MS Patch Tuesday: Pay Attention to MS09-072

Guest editorial by Jason Miller Microsoft has released six new security bulletins for December. They have also released two new security advisories as well as one bulletin that has been re-released. In addition to the Microsoft releases, even though Adobe’s quarterly security update is scheduled...

MS09-069: Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service (974392)

The version of LSASS running on the remote host improperly handles specially crafted ISAKMP messages communicated through IPsec, causing the system to consume excessive amounts of CPU resources. A remote, authenticated attacker could exploit this to cause a denial of service. C Tenable Network...

Microsoft Windows LSASS ISAKMP Message Remote Denial of Service Vulnerability

Description Microsoft Windows Local Security Authority Subsystem Service LSASS is prone to a remote denial-of-service vulnerability. A remote attacker can exploit this issue to consume an excessive amount of resources, denying service to legitimate users. Technologies Affected Microsoft Windows...

Microsoft ASN.1 Library Bitstring Heap Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

Microsoft LSASS Service DsRolerUpgradeDownlevelServer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

Microsoft Active Directory DoS

LSASS stack overflow stack memory exhaustion...

Novell NetWare LSASS CIFS.NLM Driver Stack Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Novell NetWare...

CVE-2009-2524

Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service LSASS in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a deni...

Integer overflow

Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service LSASS in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a deni...

CVE-2009-2524

CVE-2009-2524 refers to an Integer Overflow in LSASS during NTLM authentication in multiple Windows versions. A malformed NTLM packet can cause LSASS to crash and reboot the host, i.e., a denial-of-service condition. Affected software includes Windows XP SP2/SP3, Windows Server 2003 SP2, Windows ...

PT-2009-4928 · Microsoft · Windows Server 2003 +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions Gold through SP2 Microsoft Windows Server 2008 versions Gold through SP2 and R2 Microsoft Windows 7 affected versions not...