{"vuid":"VU#652537","idnumber":"652537","name":"Microsoft Windows SMB packet validation vulnerability","keywords":["SMB","CIFS","MS05-011"],"overview":"A vulnerability in the way that Microsoft Windows handles some SMB packets could allow remote attackers to execute code of their choosing on a vulnerable system.","clean_desc":"The Microsoft Server Message Block (SMB), and its follow-on, Common Internet File System (CIFS),  are network protocols that Windows uses to share files, printers, serial ports, and communicate between computers. A vulnerability exists in the way that the affected operating systems validate certain incoming SMB packets. Additional details about the underlying cause of the vulnerability are not known. An unauthenticated remote attacker may be able to exploit this vulnerability by sending specially-crafted SMB packets to a vulnerable system. Microsoft reports that this vulnerability may also be exploited through a malicious web page. In this scenario, an attacker would need to trick or persuade a user into browsing the malicious web page or following a link to the malicious web page provided in an email message.","impact":"A remote, unauthenticated attacker could execute arbitrary code on a vulnerable system.","resolution":"Apply a patch Microsoft has published MS05-011 in response to this issue. Users are strongly encouraged to review this bulletin and apply the patches it refers to.","workarounds":"Workarounds Filter network traffic\nMicrosoft Security Bulletin MS05-011 also contains recommendations about packet filtering to mitigate this issue. Users, particularly those who are affected but unable to apply the patches, are encouraged to implement these workarounds.","sysaffected":"","thanks":"Thanks to Microsoft Security for reporting this vulnerability. Microsoft, in turn, credits \neEye Digital Security with reporting this vulnerability to them.","author":"This document was written by Chad R Dougherty, based upon information provided by Microsoft.","public":["http://www.microsoft.com/technet/security/bulletin/ms05-011.mspx","http://secunia.com/advisories/11634/"],"cveids":["CVE-2005-0045"],"certadvisory":"","uscerttechnicalalert":null,"datecreated":"2005-02-08T19:02:28Z","publicdate":"2005-02-08T00:00:00Z","datefirstpublished":"2005-02-08T23:09:24Z","dateupdated":"2005-05-11T20:02:07Z","revision":8,"vrda_d1_directreport":"","vrda_d1_population":"","vrda_d1_impact":"","cam_widelyknown":"15","cam_exploitation":"0","cam_internetinfrastructure":"10","cam_population":"17","cam_impact":"20","cam_easeofexploitation":"10","cam_attackeraccessrequired":"17","cam_scorecurrent":"27.09375","cam_scorecurrentwidelyknown":"32.5125","cam_scorecurrentwidelyknownexploited":"54.1875","ipprotocol":"","cvss_accessvector":"","cvss_accesscomplexity":"","cvss_authentication":null,"cvss_confidentialityimpact":"","cvss_integrityimpact":"","cvss_availabilityimpact":"","cvss_exploitablity":null,"cvss_remediationlevel":"","cvss_reportconfidence":"","cvss_collateraldamagepotential":"","cvss_targetdistribution":"","cvss_securityrequirementscr":"","cvss_securityrequirementsir":"","cvss_securityrequirementsar":"","cvss_basescore":"","cvss_basevector":"","cvss_temporalscore":"","cvss_environmentalscore":"","cvss_environmentalvector":"","metric":27.09375,"vulnote":null}