CVE-2005-0045
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
45Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendepss 70%
da publicação à arma135 dias
Publicada no NVD8 de fev.
1ª PoC+135d
The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the "Server Message Block Vulnerability," and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1065⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://marc.info/?l=bugtraq&m=110792638401852&w=2http://marc.info/?l=bugtraq&m=111040962600205&w=2http://marc.info/?l=ntbugtraq&m=110795643831169&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-011https://exchange.xforce.ibmcloud.com/vulnerabilities/19089https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1606https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1847https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1889https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4043http://www.kb.cert.org/vuls/id/652537http://www.securityfocus.com/bid/12484http://www.us-cert.gov/cas/techalerts/TA05-039A.html