Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
Home  Ask the Team  Mailing Lists  Advertising Info  Advisories  About SecuriTeam  Blogs Brought to you by: Suppliers of: Website Testing Tools Network Testing Tools Software Testing Tools SecuriTeam in Your Inbox New vulnerability? New tool? Tell us (Our PGP key). Confidence 2013 5% Off any SANS course Use Code: SecuriTeam_5 Hack In Paris La Nuit du Hack Subjects of Interest: Vulnerability Management SQL Injection Buffer Overflows Active Network Scanning Fuzzing Fuzzer Report Network Security Network Scanner Pen Testing Security Scanner	Microsoft ASN.1 Library Vulnerability Could Allow Code Execution (MS04-007) 11 Feb. 2004    Summary A security vulnerability exists in the Microsoft ASN.1 Library that could allow code execution on an affected system. The vulnerability is caused by an unchecked buffer in the Microsoft ASN.1 Library, which could result in a buffer overflow. An attacker who successfully exploited this buffer overflow vulnerability could execute code with system privileges on an affected system. The attacker could then take any action on the system, including installing programs, viewing data, changing data, deleting data, or creating new accounts with full privileges. Abstract Syntax Notation 1 (ASN.1) is a data standard that is used by many applications and devices in the technology industry for allowing the normalization and understanding of data across various platforms. More information about ASN.1 can be found in Microsoft Knowledge Base Article 252648.   Credit: The information has been provided by Microsoft Product Security. The original article can be found at: http://www.microsoft.com/technet/security/bulletin/MS04-007.asp. Free Website Security Scan Free Fuzzer Report Vulnerability Assessment Detect web app vulnerabilities University study comparing the top Accurate and automated scanning Get guidance from professionals. 6 commercially availble fuzzers. for networks of any size.    Details Protect your website! Free Trial, Nothing to install. No interruption of visitors. www.beyondsecurity.com/vulnerability-scanner Affected Components:  * Microsoft ASN.1 Library Affected Software:  * Microsoft Windows NT? Workstation 4.0 Service Pack 6a - Download update  * Microsoft Windows NT Server 4.0 Service Pack 6a - Download update  * Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6 - Download update  * Microsoft Windows 2000 Service Pack 2, Microsoft Windows 2000 Service Pack 3, Microsoft 2000 Windows Service Pack 4 - Download update  * Microsoft Windows XP, Microsoft Windows XP Service Pack 1 - Download update  * Microsoft Windows XP 64-Bit Edition, Microsoft Windows XP 64-Bit Edition Service Pack 1 - Download update  * Microsoft Windows XP 64-Bit Edition Version 2003, Microsoft Windows XP 64-Bit Edition Version 2003 Service Pack 1 - Download update  * Microsoft Windows Server 2003 - Download update  * Microsoft Windows Server 2003 64-Bit Edition - Download update Mitigating Factors In the most likely exploitable scenario, an attacker would have to have direct access to the user's network. Vulnerability Identifier Multiple integer overflows in Microsoft ASN.1 library CAN-2003-0818 Workarounds There are no applicable workarounds. It is highly advisable to download and install the necessary update. Frequently Asked Questions What is the scope of the vulnerability ? This is a buffer overrun vulnerability. An attacker who successfully exploited this vulnerability could gain complete control over an affected system. An attacker could take any action on the system, including installing programs, viewing data, changing data, deleting data, or creating new accounts with full privileges. What causes the vulnerability ? The vulnerability is caused by an unchecked buffer in the Microsoft ASN.1 Library. If exploited, an attacker could gain system privileges on an affected system. What is ASN.1 ? Abstract Syntax Notation 1 (ASN.1) is a data standard that is used by many applications and devices in the technology industry for allowing the normalization and understanding of data across various platforms. ASN.1 has no direct relationship to any specific standard, encoding method, programming language, or hardware platform. It is simply a language for defining standards. Or in other words, standards are written in ASN.1. A vulnerability exists in Microsoft's ASN.1 implementation that, if exploited, could allow an attacker to cause code to execute remotely with system privileges on an affected system. More information about ASN.1 can be found in Microsoft Knowledge Base Article 252648. What might an attacker use the vulnerability to do ? If successfully exploited, the attacker could be able to take any action on the system, including installing programs, viewing data, changing data, deleting data, or creating new accounts with full privileges. How could an attacker exploit this vulnerability ? Because ASN.1 is a standard for many applications and devices, there are many potential attack vectors. To successfully exploit this vulnerability, an attacker must force a computer to decode malformed ASN.1 data. For example, when using authentication protocols based on ASN.1 it could be possible to construct a malformed authentication request that could expose this vulnerability. What systems are primarily at risk from this vulnerability ? Server systems are at greater risk than client computers because they are more likely to have a server process running that decodes ASN.1 data. I'm using Windows NT 4.0. How do I know if I need this update ? Windows NT 4.0 (Workstation, Server, and Terminal Server Edition) does not install the affected file by default. This file is installed as part of the MS03-041 Windows NT 4.0 security update and other possible non-security-related hotfixes. If the Windows NT 4.0 security update for MS03-041 is not installed, this may not be a required update. To verify if the affected file is installed, search for the file named Msasn1.dll. If this file is present, this security update is required. Windows Update, Software Update Services, and the Microsoft Security Baseline Analyzer will also correctly detect if this update is required. What does the update do ? The update removes the vulnerability by modifying the handling of malformed data by the ASN.1 Library.  Comments: blog comments powered by Disqus	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews  Related Articles Microsoft IE RemoveChild Use-After-Free Arbitrary Code Execution Vulnerability Microsoft Visio Viewer Tree Object Type Confusion Visio File Handling Arbitrary Execution Vulnerability Microsoft Windows Modern Mail Spoofing Weakness Vulnerability Microsoft SharePoint Callback Function URL Handling Privilege Escalation Vulnerability Microsoft IE CCaret Use-after-free Arbitrary Code Execution Vulnerability Microsoft Windows 8 TrueType Font (TTF) Handling DoS Vulnerability Microsoft IE OnResize Use-After-Free Arbitrary Code Execution Vulnerability Microsoft Windows USB Driver Memory Object Handling Local Privilege (2013-1287) Vulnerability Microsoft IE SaveHistory Onload Event Handling Use-After-Free Arbitrary Code Execution Vulnerability Microsoft IE CMarkupBehaviorContext Use-After-Free Arbitrary Code Execution Vulnerability Microsoft SharePoint XSS Vulnerability Microsoft IE OnBeforeCopy Use-After-Free Arbitrary Code Execution Vulnerability Microsoft Windows USB Driver Memory Object Handling Local Privilege Escalation Vulnerability Microsoft OneNote Buffer Size Validation ONE File Handling Information Disclosure Vulnerability Microsoft IE GetMarkupPtr execCommand Print Event Handling Use-after-free Execution Vulnerability Microsoft SharePoint Remote Overflow DoS Vulnerability Microsoft IE CTreeNode Use-After-Free Arbitrary Code Execution Vulnerability Microsoft Windows USB Driver Memory Object Handling Local Privilege (2013-1286) Vulnerability Microsoft IE CTreeNode Use-After-Free Use-After-Free Arbitrary Execution Vulnerability Microsoft IE Proxy Server TCP Session Re-Use Cross-User Information Disclosure Weakness Vulnerability  Featured Articles Microsoft SharePoint Callback Function URL Handling Privilege Escalation Vulnerability Microsoft Windows USB Driver Memory Object Handling Local Privilege (2013-1287) Vulnerability Microsoft Windows USB Driver Memory Object Handling Local Privilege Escalation Vulnerability Microsoft Windows Kernel Memory Object Handling Local Privilege Escalation Vulnerability Microsoft Windows SSL/TSL Forced Downgrade MitM Weakness Microsoft Windows Memory Object Handling Local Memory Privilege Escalation Vulnerability Microsoft Windows Privilege Escalation Vulnerability Microsoft .NET Framework Serialization Remote Code Execution Vulnerability Microsoft Visio Viewer VSD File Format Remote Code Execution Vulnerability Microsoft .NET Framework Input Serialization CVE-2012-0160 Remote Code Execution Vulnerability Microsoft .NET Framework ASP.NET Forms Authentication Bypass Vulnerability 'TrendMicro Control Manager CASProcessor.exe BLOB Code Execution Vulnerability' 'HP iNode Management Center iNodeMngChecker.exe Code Execution Vulnerability' 'HP Data Protector Backup Client Service EXEC_SCRIPT Code Execution Vulnerability' 'Microsoft Internet Explorer Property Change Memory Corruption Vulnerability' 'Microsoft Office PowerPoint PersistDirectoryEntry Code Execution Vulnerability' 'CA Total Defense Suite Heartbeat Web Service Code Execution Vulnerability' 'HP Web Jetadmin Unauthorized Access to Managed Resources Vulnerability' 'Novell Zenworks Handheld Management ZfHIPCnd.exe Opcode 2 Code Execution Vulnerability' 'Microsoft Windows Shell Graphics biCompression Buffer Overflow Vulnerability'
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus - Blogs - CVEs

Copyright © Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®