Microsoft Windows HyperTerminal Buffer Overflow Vulnerability - Secunia Advisories - Vulnerability Intelligence

Microsoft Windows HyperTerminal Buffer Overflow Vulnerability
Secunia Advisory:	SA13464	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2004-12-14
Last Update:	2004-12-15
Popularity:	15,914 views

Critical:	Moderately critical
Impact:	System access
Where:	From remote
Solution Status:	Vendor Patch

OS:	Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Professional Microsoft Windows 2000 Server Microsoft Windows NT 4.0 Server Microsoft Windows NT 4.0 Server, Terminal Server Edition Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Web Edition Microsoft Windows XP Home Edition Microsoft Windows XP Professional

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2004-0568

Description: Brett Moore has reported a vulnerability in Microsoft Windows, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error in the HyperTerminal application when processing session files and telnet URLs. This can be exploited to cause a heap-based buffer overflow by tricking a user into opening a malicious HyperTerminal session file (.ht) or clicking a specially crafted telnet URL in a malicious e-mail or on a web site. Successful exploitation allows execution of arbitrary code. NOTE: Exploitation via a telnet URL requires that HyperTerminal is set as the default telnet client (not default setting). Solution: Apply patches. Microsoft Windows NT Server 4.0 (requires Service Pack 6a): http://www.microsoft.com/downloads/de...=4C87AF7B-0EE5-4761-AD58-3698D39B62BE Microsoft Windows NT Server 4.0 Terminal Server Edition (requires Service Pack 6): http://www.microsoft.com/downloads/de...=D9F22FA6-1C9B-442A-BA6F-7584DB61C9C2 Microsoft Windows 2000 (requires Service Pack 3 or Service Pack 4): http://www.microsoft.com/downloads/de...=DA3DD6C9-DB7E-40A6-AFD0-5ED87C42190D Microsoft Windows XP (requires Service Pack 1 or Service Pack 2): http://www.microsoft.com/downloads/de...=96BBD220-5E2A-43AD-B8B7-54EC608BD8BE Microsoft Windows XP 64-Bit Edition (requires Service Pack 1): http://www.microsoft.com/downloads/de...=4970DA24-8C3B-4D99-8F89-13E8AF2E4382 Microsoft Windows XP 64-Bit Edition Version 2003: http://www.microsoft.com/downloads/de...=06662D6D-E397-40F7-A7A6-9330FBA17EBF Microsoft Windows Server 2003: http://www.microsoft.com/downloads/de...=3A36E94B-A39F-4B56-8A2D-42F1089DD158 Microsoft Windows Server 2003 64-Bit Edition: http://www.microsoft.com/downloads/de...=06662D6D-E397-40F7-A7A6-9330FBA17EBF Provided and/or discovered by: Brett Moore, Security-Assessment.com. Changelog: 2004-12-15: Updated advisory. Original Advisory: MS04-043 (KB873339): http://www.microsoft.com/technet/security/bulletin/ms04-043.mspx Security-Assessment.com: http://www.security-assessment.com/Papers/Buffer_Overflow_In_HyperTerminal.pdf

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

Today

New advisories:	19
New vulnerabilities:	68
Updated advisories:	62

Moderately // 198 views

Debian update for php5

Moderately // 143 views

Atarone CMS Multiple Vulnerabilities

Less // 157 views

MetaGauge Directory Traversal Vulnerability

Less // 183 views

H-Sphere webshell4 Cross-Site Scripting and Request Forgery

Moderately // 173 views

CMME Information Disclosure Security Issues

Moderately // 182 views

Debian update for squid

Less // 193 views

SUSE update for mercurial

Moderately // 240 views

SUSE update for openssh

Moderately // 170 views

SUSE update for dovecot and graphicsmagic

Less // 183 views

Fedora update for mediawiki

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.