|
Microsoft ISA Server 2000 H.323 Protocol Filter Vulnerability
|
|
Secunia Advisory:
|
SA10611
|
|
|
Release Date:
|
2004-01-13
|
|
Last Update:
|
2004-01-14
|
|
Popularity:
|
11,511 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Microsoft ISA Server 2000
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2003-0819
|
|
Description:
Microsoft Internet Security and Acceleration Server 2000 contain a vulnerability in the H.323 protocol implementation, which can be exploited by malicious people to cause a DoS (Denial of Service) or gain system access.
The vulnerability is caused due to various errors in the processing of H.323 traffic over TCP, which allows malicious people to overflow a buffer. This can be exploited by sending specially crafted messages to an affected system (default port 1720/tcp).
Successful exploitation may allow a malicious person to execute arbitrary code or crash a vulnerable system.
The H.323 filter is enabled by default on systems running in integrated or firewall mode.
Solution:
Microsoft has issued a patch:
Microsoft Internet Security and Acceleration Server 2000
http://www.microsoft.com/downloads/de...-9ACB-4CD449D9599B&displaylang=en
Changelog:
2004-01-14: Added link to CERT advisory.
Original Advisory:
Microsoft:
http://www.microsoft.com/technet/security/bulletin/MS04-001.asp
NISCC:
http://www.uniras.gov.uk/vuls/2004/006489/h323.htm
Other References:
CERT advisory:
http://www.cert.org/advisories/CA-2004-01.html
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
