Microsoft FrontPage Server Extensions Buffer Overflow May Let Remote Users Execute Arbitrary Code
Categorie: Vulnerability Posted: 2003-11-12 by ReCall Views: 429 Source: Click here
Current Rating: Not rated
Details
Description: Two vulnerabilities were reported in Microsoft FrontPage Server Extensions (FPSE). A remote user can execute arbitrary code on a target user's system or cause denial of service conditions.
It is reported that there is a buffer overflow in the remote debug functionality of FPSE [CVE: CAN-2003-0822]. Due to a flaw in one of the DLL files, a remote user can send a specially crafted packet to the FrontPage Server Extensions to execute arbitrary code with Local System privileges.
It is also reported that there is a flaw in the SmartHTML interpreter. A remote user can make a particular type of invalid request to FPSE to cause a target server running Front Page Server Extensions to temporarily stop responding to requests [CVE: CAN-2003- 0824]. The remote user can cause the SmartHTML interpreter to temporarily cycle, consuming all CPU resources for a temporary period of time.
Microsoft reports that Windows 2000 SP4 is not affected by either flaw. Also, FrontPage Server Extensions are not configured by default on Windows XP and Windows NT 4.0.
Microsoft SharePoint Team Services on Windows XP is also affected [a separate Alert will be issued for SharePoint].
Microsoft credits Brett Moore of Security-Assessment.com with reporting these flaws.
Impact: A remote user can execute arbitrary code on the target system with Local System privileges.
A remote user can cause denial of service conditions on the target system, causing the system to consume all available CPU resources for a temporary period of time.
Solution: Microsoft has issued the following fixes:
Microsoft plans to include this fix in any future Service Pack for Office XP.
This update supercedes the security updates contained in the MS01-035 and MS02-053 security bulletins.
As part of this fix, Microsoft has removed the remote debugging functionality, as the function is no longer supported (Terminal Server can be used for remote debugging, the report said).
See the Microsoft advisory for a list of workarounds and a description of installation options:
