|
Windows 2003 Server NIC Driver Information Disclosure Vulnerability
|
|
Secunia Advisory:
|
SA8987
|
|
|
Release Date:
|
2003-06-11
|
|
Popularity:
|
19,701 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Exposure of system information
Exposure of sensitive information
|
|
Where:
|
From local network
|
|
Solution Status:
|
Unpatched
|
|
| OS: | Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows Server 2003 Web Edition
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
Description:
A vulnerability has been identified in some NIC (Network Interface Card) device drivers shipped with Microsoft Windows 2003 Server, which can be exploited by malicious people to disclose potentially sensitive information.
The problem is that some drivers pad frames with content from previous packets or kernel memory instead of using NULL-bytes during a FIN-ACK exchange when closing a TCP connection. This may be exploited by malicious people to obtain potentially sensitive information by sending specially crafted packets to a vulnerable system.
The following drivers (both digitally signed by Microsoft) have been identified as vulnerable:
VIA Rhine II Compatible network card (integrated into some motherboards)
AMD PCNet family network cards (Used by several versions of VMWare)
Solution:
Install a network card, which doesn't use vulnerable drivers.
CERT has a list of drivers affected by a related vulnerability available at:
http://www.kb.cert.org/vuls/id/412115
Provided and/or discovered by:
Chris Paget, NGSSoftware.
Original Advisory:
http://www.nextgenss.com/advisories/etherleak-2003.txt
Other References:
This vulnerability is related to another issue:
http://www.atstake.com/research/advisories/2003/atstake_etherleak_report.pdf
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
