|
Microsoft Windows "NoDriveTypeAutoRun" Security Issue
|
|
Secunia Advisory:
|
SA29458
|
|
|
Release Date:
|
2008-03-21
|
|
Last Update:
|
2009-03-06
|
|
Popularity:
|
14,742 views
|
|
|
Critical:
|
Not critical
|
|
Impact:
|
Security Bypass
|
|
Where:
|
Local system
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Datacenter Server
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Server
Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows Server 2003 Web Edition
Microsoft Windows Server 2008
Microsoft Windows Storage Server 2003
Microsoft Windows Vista
Microsoft Windows XP Home Edition
Microsoft Windows XP Professional
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 2 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Solution:
Apply patches.
Windows XP:
http://www.microsoft.com/downloads/de...=c7dbcde3-7814-47c5-849e-e64ecfb35d74
Windows Server 2003 for Itanium-based Systems:
http://www.microsoft.com/downloads/de...=99423caf-b52b-4ebc-b80c-94ee1ef9f66b
Windows Server 2003 x64 Edition:
http://www.microsoft.com/downloads/de...7b866fb7-9bb7-4fce-b395-d0a4ee38a115
Windows Server 2003:
http://www.microsoft.com/downloads/de...=32b845ac-7681-468c-812b-2dcebdae9b40
Windows XP x64 Edition:
http://www.microsoft.com/downloads/de...=ca802f38-0566-4ac4-8808-6515623c35c5
Windows 2000:
http://www.microsoft.com/downloads/de...=3c6039f1-d84d-4294-8457-35aa8b4dcab8
Windows Vista (optionally with SP1):
http://www.microsoft.com/downloads/de...=06739ca6-7368-4acb-bb67-7e8146071a29
Windows Vista x64 Edition (optionally with SP1):
http://www.microsoft.com/downloads/de...=74ea0893-7c2f-4fad-ad27-588ad953b046
Windows Server 2008 for 32-bit Systems:
http://www.microsoft.com/downloads/de...=189a4170-b495-4904-9cbd-209e7494d303
Windows Server 2008 for x64-based Systems:
http://www.microsoft.com/downloads/de...=85d8701d-f8c7-4079-8a21-a3a9d5ba71ce
Windows Server 2008 for Itanium-based Systems:
http://www.microsoft.com/downloads/de...=b30ee4f0-850f-4ff3-86a4-663603a0a802
Provided and/or discovered by:
Will Dormann and Jeff Gennari, CERT/CC.
Changelog:
2008-07-08: Updated "Solution" section. Added "Microsoft Windows Server 2008" as affected.
2009-02-25: Updated "Solution" section. Added "Microsoft Windows 2000 Advanced Server", "Microsoft Windows 2000 Datacenter Server", "Microsoft Windows 2000 Professional", "Microsoft Windows 2000 Server", "Microsoft Windows Server 2003 Datacenter Edition", "Microsoft Windows Server 2003 Enterprise Edition", "Microsoft Windows Server 2003 Standard Edition", "Microsoft Windows Server 2003 Web Edition", "Microsoft Windows Storage Server 2003", "Microsoft Windows XP Home Edition", and "Microsoft Windows XP Professional" to list of affected products. Added link to KB967715 and Microsoft Security Advisory 967940.
2009-03-06: Added CVE identifier.
Original Advisory:
US-CERT VU#889747:
http://www.kb.cert.org/vuls/id/889747
MS08-038 (KB950582):
http://www.microsoft.com/technet/security/Bulletin/MS08-038.mspx
Microsoft KB967715:
http://support.microsoft.com/kb/967715
Microsoft Security Advisory (967940):
http://www.microsoft.com/technet/security/advisory/967940.mspx
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
