CERTA-2009-AVI-372
Vulnerability from certfr_avis

De multiples vulnérabilités dans l'implémentation de TCP/IP sous Microsoft Windows permettent d'exécuter du code arbitraire ou de réaliser un déni de service à distance.

Description

De multiples vulnérabilités ont été découvertes dans l'implémentation de TCP/IP sous Microsoft Windows :

  • un déni de service à distance est possible dû à la façon dont Microsoft Windows gère un nombre excessif de connexions TCP. Cette vulnérabilité est amplifiée lorsque la taille de la fenêtre a une valeur proche de 0 (CVE-2008-4609) ;
  • une exécution de code arbitraire à distance est possible car la pile TCP/IP de Microsoft Windows ne nettoie pas correctement les informations d'état (CVE-2009-1925) ;
  • un déni de service à distance est possible du fait d'une erreur dans la gestion des paquets ayant une taille de fenêtre proche de 0 (CVE-2009-1926).

Solution

Se référer au bulletin de sécurité Microsoft MS09-048 pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Microsoft Windows Microsoft Windows 2003 x64 Edition Service Pack 2 ;
Microsoft Windows Microsoft Windows Vista Service Pack 1 ;
Microsoft Windows Microsoft Windows Vista x64 Edition Service Pack 2 ;
Microsoft Windows Microsoft Windows Vista ;
Microsoft Windows Microsoft Windows Server 2008 for x64-based Systems ;
Microsoft Windows Microsoft Windows 2003 with SP2 for Itanium-based Systems ;
Microsoft Windows Microsoft Windows Vista Service Pack 2 ;
Microsoft Windows Microsoft Windows Server 2008 for 32-bit Systems Service Pack 2 ;
Microsoft Windows Microsoft Windows Vista x64 Edition Service Pack 1 ;
Microsoft Windows Microsoft Windows Server 2008 for Itanium-based Systems ;
Microsoft Windows Microsoft Windows Vista x64 Edition ;
Microsoft Windows Microsoft Windows Server 2008 for x64-based Systems Service Pack 2 ;
Microsoft Windows Microsoft Windows Server 2008 for 32-bit Systems ;
Microsoft Windows Microsoft Windows 2003 Service Pack 2 ;
Microsoft Windows Microsoft Windows Server 2008 for Itanium-based Systems Service Pack 2.
Microsoft Windows Microsoft Windows 2000 Service Pack 4 ;
References

Show details on source website

To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Windows 2003 x64 Edition Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Vista Service Pack 1 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Vista x64 Edition Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Vista ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Server 2008 for x64-based Systems ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows 2003 with SP2 for Itanium-based Systems ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Vista Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Server 2008 for 32-bit Systems Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Vista x64 Edition Service Pack 1 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Server 2008 for Itanium-based Systems ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Vista x64 Edition ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Server 2008 for x64-based Systems Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Server 2008 for 32-bit Systems ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows 2003 Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Server 2008 for Itanium-based Systems Service Pack 2.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows 2000 Service Pack 4 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans l\u0027impl\u00e9mentation de\nTCP/IP sous Microsoft Windows :\n\n-   un d\u00e9ni de service \u00e0 distance est possible d\u00fb \u00e0 la fa\u00e7on dont\n    Microsoft Windows g\u00e8re un nombre excessif de connexions TCP. Cette\n    vuln\u00e9rabilit\u00e9 est amplifi\u00e9e lorsque la taille de la fen\u00eatre a une\n    valeur proche de 0 (CVE-2008-4609) ;\n-   une ex\u00e9cution de code arbitraire \u00e0 distance est possible car la pile\n    TCP/IP de Microsoft Windows ne nettoie pas correctement les\n    informations d\u0027\u00e9tat (CVE-2009-1925) ;\n-   un d\u00e9ni de service \u00e0 distance est possible du fait d\u0027une erreur dans\n    la gestion des paquets ayant une taille de fen\u00eatre proche de 0\n    (CVE-2009-1926).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 Microsoft MS09-048 pour l\u0027obtention\ndes correctifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2009-1926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1926"
    },
    {
      "name": "CVE-2008-4609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-4609"
    },
    {
      "name": "CVE-2009-1925",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1925"
    }
  ],
  "initial_release_date": "2009-09-09T00:00:00",
  "last_revision_date": "2009-09-09T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS09-048 du 08 septembre    2009 :",
      "url": "http://www.microsoft.com/france/technet/security/Bulletin/MS09-048.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS09-048 du 08 septembre    2009 :",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS09-048.mspx"
    }
  ],
  "reference": "CERTA-2009-AVI-372",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2009-09-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s dans l\u0027impl\u00e9mentation de TCP/IP sous \u003cspan\nclass=\"textit\"\u003eMicrosoft Windows\u003c/span\u003e permettent d\u0027ex\u00e9cuter du code\narbitraire ou de r\u00e9aliser un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans TCP/IP sous Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS09-048 du 08 septembre 2009",
      "url": null
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.