10 - CVE-2008-4250

Executive Summary

Informations
Name	CVE-2008-4250	First vendor Publication	2008-10-23
Vendor	Cve	Last vendor Modification	2022-02-09

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4250

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-94	Failure to Control Generation of Code ('Code Injection')

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:6093

Oval ID:	oval:org.mitre.oval:def:6093
Title:	Server Service Vulnerability
Description:	The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2008-4250	Version:	4
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
Check for vulnerable Windows 2000 SP4 and Netapi32.dll version Microsoft Windows 2000 SP4 or later is installed AND Netapi32.dll version is less than 5.0.2195.7203 OR Check for vulnerable Windows XP (x86) SP2 and Netapi32.dll version Microsoft Windows XP (x86) SP2 is installed AND Netapi32.dll version is less than 5.1.2600.3462 OR Check for vulnerable Windows XP (x86) SP3 and Netapi32.dll version Microsoft Windows XP (x86) SP3 is installed AND Netapi32.dll version is less than 5.1.2600.5694 OR Check for vulnerable Windows Server 2003 SP1 (x86)/(x64)/(IA-64)/XP x64 SP1 and Netapi32.dll version Check for vulnerable Windows Server 2003 SP1 (x86)/(x64)/(IA-64)/XP x64 SP1 Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP1 (x64) is installed AND Microsoft Windows XP Professional x64 Edition SP1 is installed AND Microsoft Windows Server 2003 SP1 for Itanium is installed AND Netapi32.dll version is less than 5.2.3790.3229 OR Check for vulnerable Windows Server 2003 SP2 (x86)/(x64)/(IA-64)/XP x64 SP2 and Netapi32.dll version Check for vulnerable Windows Server 2003 SP2 (x86)/(x64)/(IA-64)/XP x64 SP2 Microsoft Windows Server 2003 SP2 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x64) is installed AND Microsoft Windows XP x64 Edition SP2 is installed AND Microsoft Windows Server 2003 (ia64) SP2 is installed AND Netapi32.dll version is less than 5.2.3790.4392 OR Check for vulnerable Windows (x64)/(x86) and Netapi32.dll version Check for vulnerable Windows (x64)/(x86) Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Vista (32-bit) is installed AND Check for LDR/GDR Check for GDR Netapi32.dll version is less than 6.0.6000.16764 OR Check for LDR Netapi32.dll version is greater than 6.0.6000.20000 AND Netapi32.dll version is less than 6.0.6000.20937 OR Check for vulnerable Windows SP1(X86)/(X64)/Server 2008 (X86)/(X64)/(IA-64) and Netapi32.dll version Check for vulnerable Windows SP1(X86)/(X64)/Server 2008 (X86)/(X64)/(IA-64) Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Vista x64 Edition Service Pack 1 is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND Check for LDR/GDR Check for GDR Netapi32.dll version is less than 6.0.6001.18157 OR Check for LDR Netapi32.dll version is greater than 6.0.6001.22000 AND Netapi32.dll version is less than 6.0.6001.22288

CPE : Common Platform Enumeration

Type	Description	Count
Os	Microsoft Windows 2000 cpe:2.3:o:microsoft:windows_2000:-:sp4::::::	1
Os	Microsoft Windows Server 2003 cpe:2.3:o:microsoft:windows_server_2003:-:sp2:::::x64:* cpe:2.3:o:microsoft:windows_server_2003:-:sp1:::-::itanium: cpe:2.3:o:microsoft:windows_server_2003:-:sp2:::::itanium:* cpe:2.3:o:microsoft:windows_server_2003:-:sp2:::::: cpe:2.3:o:microsoft:windows_server_2003:-:sp1:::::: cpe:2.3:o:microsoft:windows_server_2003:-::::::x64:	6
Os	Microsoft Windows Server 2008 cpe:2.3:o:microsoft:windows_server_2008:-::::-::itanium:* cpe:2.3:o:microsoft:windows_server_2008:-::::-::x64:* cpe:2.3:o:microsoft:windows_server_2008:-::::-::x86:*	3
Os	Microsoft Windows Vista cpe:2.3:o:microsoft:windows_vista:-:::::::* cpe:2.3:o:microsoft:windows_vista:-:sp1:::::: cpe:2.3:o:microsoft:windows_vista:-::::::x64: cpe:2.3:o:microsoft:windows_vista:-:sp1:::-::x64:	4
Os	Microsoft Windows Xp cpe:2.3:o:microsoft:windows_xp:-:sp3:::::: cpe:2.3:o:microsoft:windows_xp:-:sp2:::professional::x64: cpe:2.3:o:microsoft:windows_xp:-:-:::professional::x64: cpe:2.3:o:microsoft:windows_xp:-:sp2::::::	4

SAINT Exploits

Description	Link
Windows Server Service buffer overflow MS08-067	More info here

ExploitDB Exploits

id	Description
2011-01-21	Microsoft Server Service Relative Path Stack Corruption
2008-11-16	MS Windows Server Service - Code Execution Exploit (MS08-067) (2k/2k3)
2008-11-12	MS Windows Server Service - Code Execution Exploit (MS08-067)
2008-10-26	MS Windows Server Service Code Execution Exploit (MS08-067) (Univ)
2008-10-23	MS Windows Server Service Code Execution PoC (MS08-067)

OpenVAS Exploits

Date	Description
2009-04-17	Name : Conficker Detection File : nvt/conficker.nasl
2008-10-30	Name : Vulnerability in Server Service Could Allow Remote Code Execution (958644) File : nvt/secpod_ms08-067_900056.nasl
2008-10-24	Name : Server Service Could Allow Remote Code Execution Vulnerability (958644) File : nvt/secpod_ms08-067_900055.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
49243	Microsoft Windows Server Service Crafted RPC Request Handling Unspecified Rem... Microsoft Windows Server Service contains a flaw that may allow a malicious user to remotely execute arbitrary code. The issue is triggered when a crafted RPC request is handled. It is possible that the flaw may allow remote code execution resulting in a loss of integrity.

Information Assurance Vulnerability Management (IAVM)

Date	Description
2008-10-23	IAVM : 2008-A-0081 - Microsoft Server Service Remote Code Execution Vulnerability Severity : Category I - VMSKEY : V0017870

Snort® IPS/IDS

Date	Description
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel unicode overflow attempt RuleID : 15068 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel unicode object call overflow ... RuleID : 15067 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel unicode little endian overflo... RuleID : 15066 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel unicode little endian object ... RuleID : 15065 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel unicode little endian andx ov... RuleID : 15064 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel unicode little endian andx ob... RuleID : 15063 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel unicode andx overflow attempt RuleID : 15062 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel unicode andx object call over... RuleID : 15061 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel overflow attempt RuleID : 15060 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel object call overflow attempt RuleID : 15059 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel little endian overflow attempt RuleID : 15058 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel little endian object call ove... RuleID : 15057 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel little endian andx overflow a... RuleID : 15056 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel little endian andx object cal... RuleID : 15055 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel andx overflow attempt RuleID : 15054 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel andx object call overflow att... RuleID : 15053 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX unicode overflow at... RuleID : 15052 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX unicode object call... RuleID : 15051 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX unicode little endi... RuleID : 15050 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX unicode little endi... RuleID : 15049 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX unicode little endi... RuleID : 15048 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX unicode little endi... RuleID : 15047 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX unicode andx overfl... RuleID : 15046 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX unicode andx object... RuleID : 15045 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX overflow attempt RuleID : 15044 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX object call overflo... RuleID : 15043 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX little endian overf... RuleID : 15042 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX little endian objec... RuleID : 15041 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX little endian andx ... RuleID : 15040 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX little endian andx ... RuleID : 15039 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX andx overflow attempt RuleID : 15038 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX andx object call ov... RuleID : 15037 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel unicode overflow attempt RuleID : 15036 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel unicode little endian over... RuleID : 15035 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel unicode little endian andx... RuleID : 15034 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel unicode andx overflow attempt RuleID : 15033 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel overflow attempt RuleID : 15032 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel little endian overflow att... RuleID : 15031 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel little endian andx overflo... RuleID : 15030 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel andx overflow attempt RuleID : 15029 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX unicode overflow... RuleID : 15028 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX unicode little e... RuleID : 15027 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX unicode little e... RuleID : 15026 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX unicode andx ove... RuleID : 15025 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX overflow attempt RuleID : 15024 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX little endian ov... RuleID : 15023 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX little endian an... RuleID : 15022 - Revision : 5 - Type : NETBIOS
2015-05-28	SMB v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel WriteAndX andx overflow at... RuleID : 15021 - Revision : 5 - Type : NETBIOS
2015-05-28	DCERPC NCACN-IP-TCP wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel overflow attempt RuleID : 15020 - Revision : 5 - Type : NETBIOS
2015-05-28	DCERPC NCACN-IP-TCP wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel object call o... RuleID : 15019 - Revision : 5 - Type : NETBIOS
2015-05-28	DCERPC NCACN-IP-TCP wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel little endian... RuleID : 15018 - Revision : 5 - Type : NETBIOS
2015-05-28	DCERPC NCACN-IP-TCP wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel little endian... RuleID : 15017 - Revision : 5 - Type : NETBIOS
2015-05-28	DCERPC NCACN-IP-TCP v4 wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel overflow a... RuleID : 15016 - Revision : 5 - Type : NETBIOS
2014-01-10	DCERPC NCACN-IP-TCP wkssvc NetrUseAdd/NetrUseGetInfo/NetrUseDel overflow attempt RuleID : 15015 - Revision : 17 - Type : OS-WINDOWS
2014-01-10	Microsoft Windows SMB v4 srvsvc NetrpPathCononicalize unicode path cononicali... RuleID : 14896 - Revision : 9 - Type : OS-WINDOWS
2015-05-28	DCERPC NCADG-IP-UDP srvsvc NetrpPathCanonicalize little endian object call pa... RuleID : 14895 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC NCACN-IP-TCP srvsvc NetrpPathCanonicalize little endian object call pa... RuleID : 14894 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC DIRECT-UDP srvsvc NetrpPathCanonicalize little endian object call path... RuleID : 14893 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC NCACN-IP-TCP srvsvc NetrpPathCanonicalize object call path canonicaliz... RuleID : 14892 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC NCADG-IP-UDP srvsvc NetrpPathCanonicalize object call path canonicaliz... RuleID : 14891 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC DIRECT-UDP srvsvc NetrpPathCanonicalize object call path canonicalizat... RuleID : 14890 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC NCADG-IP-UDP srvsvc NetrpPathCanonicalize little endian path canonical... RuleID : 14889 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC NCACN-IP-TCP srvsvc NetrpPathCanonicalize little endian path canonical... RuleID : 14888 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC DIRECT-UDP srvsvc NetrpPathCanonicalize little endian path canonicaliz... RuleID : 14887 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC NCACN-IP-TCP srvsvc NetrpPathCanonicalize path canonicalization stack ... RuleID : 14886 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC NCADG-IP-UDP srvsvc NetrpPathCanonicalize path canonicalization stack ... RuleID : 14885 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC DIRECT-UDP srvsvc NetrpPathCanonicalize path canonicalization stack ov... RuleID : 14884 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC NCACN-IP-TCP v4 srvsvc NetrpPathCanonicalize path canonicalization sta... RuleID : 14883 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC NCADG-IP-UDP v4 srvsvc NetrpPathCanonicalize little endian path canoni... RuleID : 14882 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC NCACN-IP-TCP v4 srvsvc NetrpPathCanonicalize little endian path canoni... RuleID : 14881 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC DIRECT-UDP v4 srvsvc NetrpPathCanonicalize little endian path canonica... RuleID : 14880 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC NCADG-IP-UDP v4 srvsvc NetrpPathCanonicalize path canonicalization sta... RuleID : 14879 - Revision : 9 - Type : NETBIOS
2015-05-28	DCERPC DIRECT-UDP v4 srvsvc NetrpPathCanonicalize path canonicalization stack... RuleID : 14878 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize unicode little endian andx path canonical... RuleID : 14877 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode little endian andx object ... RuleID : 14876 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize little endian andx object call path canonica... RuleID : 14875 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize andx object call path canonicalization stack... RuleID : 14874 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode andx object call path cano... RuleID : 14873 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX little endian andx object call pat... RuleID : 14872 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX little endian andx object call pat... RuleID : 14871 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize little endian andx object call path canonica... RuleID : 14870 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode little endian andx object ... RuleID : 14869 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode andx object call path cano... RuleID : 14868 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX andx object call path canonicaliza... RuleID : 14867 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode andx object call path canonicalizati... RuleID : 14866 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize WriteAndX unicode little endian andx path... RuleID : 14865 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode andx path canonicalization stack ove... RuleID : 14864 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode little endian andx object call path ... RuleID : 14863 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode andx object call path canonicalizati... RuleID : 14862 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode little endian andx object call path ... RuleID : 14861 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize little endian andx path canonicalization sta... RuleID : 14860 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize andx path canonicalization stack overflow at... RuleID : 14859 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode little endian andx path ca... RuleID : 14858 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode andx path canonicalization... RuleID : 14857 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX andx path canonicalization stack o... RuleID : 14856 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize little endian andx path canonicalization sta... RuleID : 14855 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX little endian andx path canonicali... RuleID : 14854 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX little endian andx path canonicali... RuleID : 14853 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize WriteAndX andx path canonicalization stac... RuleID : 14852 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize unicode andx path canonicalization stack ... RuleID : 14851 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize WriteAndX little endian andx path canonic... RuleID : 14850 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode little endian andx path canonicaliza... RuleID : 14849 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize andx path canonicalization stack overflow... RuleID : 14848 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize andx path canonicalization stack overflow at... RuleID : 14847 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX andx path canonicalization stack o... RuleID : 14846 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode little endian andx path canonicaliza... RuleID : 14845 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize WriteAndX unicode andx path canonicalizat... RuleID : 14844 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode andx path canonicalization stack ove... RuleID : 14843 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX andx object call path canonicaliza... RuleID : 14842 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize andx object call path canonicalization stack... RuleID : 14841 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode little endian andx path ca... RuleID : 14840 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize little endian andx path canonicalization ... RuleID : 14839 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize little endian andx path canonicalization ... RuleID : 14838 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize WriteAndX andx path canonicalization stac... RuleID : 14837 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode andx path canonicalization... RuleID : 14836 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize WriteAndX unicode andx path canonicalizat... RuleID : 14835 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize unicode little endian andx path canonical... RuleID : 14834 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize WriteAndX little endian andx path canonic... RuleID : 14833 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize andx path canonicalization stack overflow... RuleID : 14832 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize unicode andx path canonicalization stack ... RuleID : 14831 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize WriteAndX unicode little endian andx path... RuleID : 14830 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize unicode little endian path canonicalizati... RuleID : 14829 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode little endian object call ... RuleID : 14828 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize little endian object call path canonicalizat... RuleID : 14827 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize object call path canonicalization stack over... RuleID : 14826 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode object call path canonical... RuleID : 14825 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX little endian object call path can... RuleID : 14824 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX little endian object call path can... RuleID : 14823 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize little endian object call path canonicalizat... RuleID : 14822 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode little endian object call ... RuleID : 14821 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode object call path canonical... RuleID : 14820 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX object call path canonicalization ... RuleID : 14819 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode object call path canonicalization st... RuleID : 14818 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize WriteAndX unicode little endian path cano... RuleID : 14817 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode path canonicalization stack overflow... RuleID : 14816 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode little endian object call path canon... RuleID : 14815 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode object call path canonicalization st... RuleID : 14814 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode little endian object call path canon... RuleID : 14813 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize little endian path canonicalization stack ov... RuleID : 14812 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize path canonicalization stack overflow attempt RuleID : 14811 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode little endian path canonic... RuleID : 14810 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode path canonicalization stac... RuleID : 14809 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX path canonicalization stack overfl... RuleID : 14808 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize little endian path canonicalization stack ov... RuleID : 14807 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX little endian path canonicalizatio... RuleID : 14806 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX little endian path canonicalizatio... RuleID : 14805 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize WriteAndX path canonicalization stack ove... RuleID : 14804 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize unicode path canonicalization stack overf... RuleID : 14803 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize WriteAndX little endian path canonicaliza... RuleID : 14802 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode little endian path canonicalization ... RuleID : 14801 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize path canonicalization stack overflow attempt RuleID : 14800 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize path canonicalization stack overflow attempt RuleID : 14799 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX path canonicalization stack overfl... RuleID : 14798 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode little endian path canonicalization ... RuleID : 14797 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize WriteAndX unicode path canonicalization s... RuleID : 14796 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize unicode path canonicalization stack overflow... RuleID : 14795 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX object call path canonicalization ... RuleID : 14794 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize object call path canonicalization stack over... RuleID : 14793 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode little endian path canonic... RuleID : 14792 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize little endian path canonicalization stack... RuleID : 14791 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize little endian path canonicalization stack... RuleID : 14790 - Revision : 9 - Type : NETBIOS-DG
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize WriteAndX path canonicalization stack ove... RuleID : 14789 - Revision : 9 - Type : NETBIOS
2015-05-28	SMB srvsvc NetrpPathCanonicalize WriteAndX unicode path canonicalization stac... RuleID : 14788 - Revision : 10 - Type : NETBIOS-DG
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize WriteAndX unicode path canonicalization s... RuleID : 14787 - Revision : 10 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize unicode little endian path canonicalizati... RuleID : 14786 - Revision : 10 - Type : NETBIOS-DG
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize WriteAndX little endian path canonicaliza... RuleID : 14785 - Revision : 10 - Type : NETBIOS
2015-05-28	SMB v4 srvsvc NetrpPathCanonicalize path canonicalization stack overflow attempt RuleID : 14784 - Revision : 10 - Type : NETBIOS-DG
2014-01-10	DCERPC NCADG-IP-UDP srvsvc NetrpPathCanonicalize path canonicalization stack ... RuleID : 14783 - Revision : 17 - Type : OS-WINDOWS
2014-01-10	DCERPC NCACN-IP-TCP srvsvc NetrpPathCanonicalize path canonicalization stack ... RuleID : 14782 - Revision : 21 - Type : OS-WINDOWS

Metasploit Database

id	Description
2014-02-10	MS08-067 Scanner

Nessus® Vulnerability Scanner

Date	Description
2008-10-23	Name : The remote Windows host is affected by a remote code execution vulnerability. File : smb_kb958644.nasl - Type : ACT_GATHER_INFO
2008-10-23	Name : The remote Windows host is affected by a remote code execution vulnerability. File : smb_nt_ms08-067.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/31874
BUGTRAQ	http://www.securityfocus.com/archive/1/497808/100/0/threaded http://www.securityfocus.com/archive/1/497816/100/0/threaded
CERT	http://www.us-cert.gov/cas/techalerts/TA08-297A.html http://www.us-cert.gov/cas/techalerts/TA09-088A.html
CERT-VN	http://www.kb.cert.org/vuls/id/827267
EXPLOIT-DB	https://www.exploit-db.com/exploits/6824 https://www.exploit-db.com/exploits/6841 https://www.exploit-db.com/exploits/7104 https://www.exploit-db.com/exploits/7132
HP	http://marc.info/?l=bugtraq&m=122703006921213&w=2
MISC	http://blogs.securiteam.com/index.php/archives/1150
MS	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08...
OVAL	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
SECTRACK	http://www.securitytracker.com/id?1021091
SECUNIA	http://secunia.com/advisories/32326
VUPEN	http://www.vupen.com/english/advisories/2008/2902
XF	https://exchange.xforce.ibmcloud.com/vulnerabilities/46040

Alert History

If you want to see full details history, please login or register.

Date	Informations
2022-02-10 12:06:22	Multiple Updates
2021-05-04 12:08:06	Multiple Updates
2021-04-22 01:08:27	Multiple Updates
2020-05-23 00:22:18	Multiple Updates
2019-03-18 12:01:49	Multiple Updates
2019-02-26 17:19:30	Multiple Updates
2018-10-13 00:22:43	Multiple Updates
2018-10-12 00:20:27	Multiple Updates
2017-09-29 09:23:44	Multiple Updates
2017-08-08 09:24:24	Multiple Updates
2016-09-01 01:01:18	Multiple Updates
2016-06-28 17:18:26	Multiple Updates
2016-04-26 17:51:30	Multiple Updates
2015-05-28 21:26:27	Multiple Updates
2014-11-14 13:24:21	Multiple Updates
2014-02-17 10:46:43	Multiple Updates
2014-01-19 21:25:16	Multiple Updates
2014-01-13 17:19:31	Multiple Updates
2013-11-11 12:38:03	Multiple Updates
2013-05-11 00:27:03	Multiple Updates
2012-11-07 00:18:14	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	1
CPE ID(s)	18
Sources(s)	18
Saint Exploit(s)	1
osvdb(s)	1
ExploitDB Exploit(s)	5
Metasploit Exploit(s)	1
Openvas Exploit(s)	3
IAVM(s)	1
Snort® Rule(s)	169
Nessus® Exploit(s)	2

	Related
10	VU#827267
10	TA09-088A
10	TA08-297A
10	MS08-067
10	KB958963
10	HPSBST02386 SSR...
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 6 more Alert(s)