A security issue has been identified in Windows 2003 Server, which can be exploited to bypass the security mechanism included for detecting and protecting against exploitation of stack based buffer overflows.

The problem is that it is possible to cause stack based buffer overflows without overwriting the canary or cookie placed on the stack to detect possible exploitation.

See the original paper for a detailed description.

Solution
Don't rely solely on the protection mechanism to prevent exploitation of stack based buffer overflows. Make sure that systems are patched or apply workarounds when new vulnerabilities are reported and follow best security practises to lessen impact and threat.

Provided and/or discovered by
David Litchfield, NGSSoftware.

Original Advisory
http://www.nextgenss.com/papers/defeating-w2k3-stack-protection.pdf

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area