National Cyber Awareness System

Vulnerability Summary for CVE-2007-1748

Overview

Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape sequences.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA07-128A

Name: TA07-128A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA07-128A.html

US-CERT Technical Alert: TA07-103A

Name: TA07-103A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA07-103A.html

US-CERT Vulnerability Note: VU#555920

Name: VU#555920

Hyperlink:http://www.kb.cert.org/vuls/id/555920

External Source: XF

Name: win-dns-rpc-bo(33629)

Hyperlink:http://xforce.iss.net/xforce/xfdb/33629

External Source: VUPEN

Name: ADV-2007-1366

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/1366

External Source: SECTRACK

Name: 1017910

Hyperlink:http://www.securitytracker.com/id?1017910

External Source: BID

Name: 23470

Hyperlink:http://www.securityfocus.com/bid/23470

External Source: HP

Name: SSRT071422

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/468871/100/200/threaded

External Source: HP

Name: HPSBST02214

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/468871/100/200/threaded

External Source: BUGTRAQ

Name: 20070415 Re: [exploits] RPC vuln in DNS Server (fwd)

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/465863/100/100/threaded

External Source: MS

Name: MS07-029

Hyperlink:http://www.microsoft.com/technet/security/bulletin/ms07-029.mspx

External Source: CONFIRM

Name: http://www.microsoft.com/technet/security/advisory/935964.mspx

Type: Advisory

Hyperlink:http://www.microsoft.com/technet/security/advisory/935964.mspx

External Source: SECUNIA

Name: 24871

Type: Advisory

Hyperlink:http://secunia.com/advisories/24871

External Source: MISC

Name: http://metasploit.com/svn/framework3/trunk/modules/exploits/windows/dcerpc/msdns_zonename.rb

Hyperlink:http://metasploit.com/svn/framework3/trunk/modules/exploits/windows/dcerpc/msdns_zonename.rb

External Source: MISC

Name: http://blogs.technet.com/msrc/archive/2007/04/12/microsoft-security-advisory-935964-posted.aspx

Hyperlink:http://blogs.technet.com/msrc/archive/2007/04/12/microsoft-security-advisory-935964-posted.aspx

US Government Resource: oval:org.mitre.oval:def:1228

Name: oval:org.mitre.oval:def:1228

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1228

References to Check Content

Identifier:oval:org.mitre.oval:def:1228

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:1228