Secunia

A vulnerability has been discovered in all supported Windows versions except Windows ME, which can be exploited by malicious people to disclose potentially sensitive information.

The problem is that the NetBIOS Name Service (port 137/udp) padds datagrams with random memory content when replying to Name Service queries. This can be exploited by sending Name Service queries to a system and then examining the responses.

Successful exploitation allows disclosure of arbitrary memory content, which potentially may reveal sensitive information.

Solution
Apply patches automatically via WindowsUpdate or manually.
Further details available in Customer Area

Provided and/or discovered by
Mike Price, Foundstone Labs.

Changelog
Further details available in Customer Area

Original Advisory
Security Bulletin MS03-034:
http://www.microsoft.com/technet/security/bulletin/MS03-034.asp

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area