CVE

Id
11251  
CVE No.
CVE-2005-0045  
Status
Candidate  
Description
The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the "Server Message Block Vulnerability," and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields.  
Phase
Assigned (20050111)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
79510 11251 CVE-2005-0045 BUGTRAQ:20050209 EEYE: Windows SMB Client Transaction Response Handling Vulnerability  View
79511 11251 CVE-2005-0045 URL:http://marc.info/?l=bugtraq&m=110792638401852&w=2  View
79512 11251 CVE-2005-0045 NTBUGTRAQ:20050209 EEYE: Windows SMB Client Transaction Response Handling Vulnerability  View
79513 11251 CVE-2005-0045 URL:http://marc.info/?l=ntbugtraq&m=110795643831169&w=2  View
79514 11251 CVE-2005-0045 BUGTRAQ:20050309 Update: MS05-011 EEYE: Windows SMB Client Transaction Response Handling Vulnerability  View
79515 11251 CVE-2005-0045 URL:http://marc.info/?l=bugtraq&m=111040962600205&w=2  View
79516 11251 CVE-2005-0045 MS:MS05-011  View
79517 11251 CVE-2005-0045 URL:http://www.microsoft.com/technet/security/bulletin/ms05-011.mspx  View
79518 11251 CVE-2005-0045 CERT:TA05-039A  View
79519 11251 CVE-2005-0045 URL:http://www.us-cert.gov/cas/techalerts/TA05-039A.html  View
79520 11251 CVE-2005-0045 CERT-VN:VU#652537  View
79521 11251 CVE-2005-0045 URL:http://www.kb.cert.org/vuls/id/652537  View
79522 11251 CVE-2005-0045 BID:12484  View
79523 11251 CVE-2005-0045 URL:http://www.securityfocus.com/bid/12484  View
79524 11251 CVE-2005-0045 OVAL:oval:org.mitre.oval:def:1606  View
79525 11251 CVE-2005-0045 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1606  View
79526 11251 CVE-2005-0045 OVAL:oval:org.mitre.oval:def:1847  View
79527 11251 CVE-2005-0045 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1847  View
79528 11251 CVE-2005-0045 OVAL:oval:org.mitre.oval:def:1889  View
79529 11251 CVE-2005-0045 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1889  View
79530 11251 CVE-2005-0045 OVAL:oval:org.mitre.oval:def:4043  View
79531 11251 CVE-2005-0045 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4043  View
79532 11251 CVE-2005-0045 XF:win-smb-code-execution(19089)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61894 JVNDB-2005-000096 Microsoft Windows の COM 構造化ストレージファイルの処理における任意のコードを実行される脆弱性 Microsoft Windows には、COM 構造化ストレージファイルおよびオブジェクトの処理の過程で、OS やプログラムがメモリにアクセスする際に不備が存在し、意図的に作成されたプログラムの実行による権限昇格の脆弱性が存在します。 CVE-2005-0047 11251 7.2 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000096.html  View