logo
DATABASE RESOURCES PRICING ABOUT US

Microsoft Windows License Logging Server Remote Heap Buffer Overflow Vulnerability

Description

### Description The Microsoft Windows License Logging Server is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise affected computers. Failed exploit attempts will result in a denial-of-service condition. ### Technologies Affected * Microsoft Windows 2000 Advanced Server * Microsoft Windows 2000 Advanced Server SP1 * Microsoft Windows 2000 Advanced Server SP2 * Microsoft Windows 2000 Advanced Server SP3 * Microsoft Windows 2000 Advanced Server SP4 * Microsoft Windows 2000 Datacenter Server * Microsoft Windows 2000 Datacenter Server SP1 * Microsoft Windows 2000 Datacenter Server SP2 * Microsoft Windows 2000 Datacenter Server SP3 * Microsoft Windows 2000 Datacenter Server SP4 * Microsoft Windows 2000 Server SP1 * Microsoft Windows 2000 Server SP2 * Microsoft Windows 2000 Server SP3 * Microsoft Windows 2000 Server SP4 * Nortel Networks Contact Center - TAPI Server * Nortel Networks Contact Center Express * Nortel Networks Enterprise VoIP TM-CS1000 ### Recommendations **Block external access at the network boundary, unless external parties require service.** Filter access to the affected computer at the network boundary if global access isn't needed. Restricting access to only trusted computers and networks might greatly reduce the likelihood of a successful exploit. **Deploy network intrusion detection systems to monitor network traffic for malicious activity.** Use NIDS to detect suspicious or anomalous network traffic. Monitor logs for signs of malicious activity. **Implement multiple redundant layers of security.** Memory-protection schemes such as nonexecutable stack and heap configurations and randomly mapped memory segments will complicate exploits of memory-corruption vulnerabilities. The vendor has released an advisory and updates. Please see the references for details.


Affected Software


CPE Name Name Version
microsoft windows 2000 Datacenter Server SP4
microsoft windows 2000 Datacenter Server
microsoft windows 2000 Datacenter Server SP3
microsoft windows 2000 Server SP3
microsoft windows 2000 Datacenter Server SP1
microsoft windows 2000 Server SP2
microsoft windows 2000 Advanced Server SP4
microsoft windows 2000 Datacenter Server SP2
microsoft windows 2000 Advanced Server SP2
microsoft windows 2000 Advanced Server
microsoft windows 2000 Advanced Server SP3
microsoft windows 2000 Server SP1
microsoft windows 2000 Server SP4
microsoft windows 2000 Advanced Server SP1