(MS08-067) Vulnerability in Server Service Could Allow Remote Code Execution (958644)

Publish date: April 04, 2012

Severity: CRITICAL

CVE Identifier: CVE-2008-4250

Advisory Date: APR 04, 2012

DESCRIPTION

This security update resolves a privately reported vulnerability in the Server service. This vulnerability could allow remote code execution if an affected system received a specially-crafted RPC request.

This vulnerability may be used by malicious users in the crafting of a wormable exploit. It is recommended to observe firewall best practices and standard default firewall configurations to protect network resources from attacks exploiting this vulnerability.

TREND MICRO PROTECTION INFORMATION

Trend Micro clients using OfficeScan with Intrusion Defense Firewall (IDF) may refer to the table below for the pattern filter identifier(s):

Microsoft Bulletin ID	Vulnerability ID	Identifier & Title	IDF First Pattern Version	IDF First Pattern Release Version
MS08-067	CVE-2008-4250	1002975 - Server Service Vulnerability (wkssvc)
MS08-067	CVE-2008-4250	1003080 - Server Service Vulnerability (srvsvc)

AFFECTED SOFTWARE AND VERSION

Microsoft Windows 2000 Service Pack 4
Microsoft Windows Server 2003 Service Pack 1
Microsoft Windows Server 2003 Service Pack 2
Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
Microsoft Windows Server 2003 with SP2 for Itanium-based Systems
Microsoft Windows Server 2003 x64 Edition
Microsoft Windows Server 2003 x64 Edition Service Pack 2
Microsoft Windows XP Professional x64 Edition
Microsoft Windows XP Professional x64 Edition Service Pack 2
Microsoft Windows XP Service Pack 2
Microsoft Windows XP Service Pack 3
Windows Server 2008 for 32-bit Systems
Windows Server 2008 for Itanium-based Systems
Windows Server 2008 for x64-based Systems
Windows Vista
Windows Vista Service Pack 1
Windows Vista x64 Edition
Windows Vista x64 Edition Service Pack 1

Related Vulnerability

Server Service Vulnerability

Related Malware

Related Web Attack

Featured Stories

$hacker machine interface$
The State of SCADA HMI Vulnerabilities
A complete discussion of the different vulnerability categories, including case studies of vulnerable SCADA HMIs. The paper also provides a guide for vulnerability researchers, as well as vendors on quick and efficient bug discovery.
Read more
Rogue Robots: Testing the Limits of an Industrial Robot’s Security
The modern world relies heavily on industrial robots. But is the current robotics ecosystem secure enough to withstand a cyber attack?
Read more
$two years of pawn storm$
From Espionage to Cyber Propaganda: Pawn Storm's Activities over the Past Two Years
This paper takes a look at Pawn Storm's operations within the last two years, and how the group has expanded their activities from espionage to the use of cyber propaganda tactics.
Read more
$securing home routers$
Securing Your Routers Against Mirai and Other Home Network Attacks
Cybercriminals can turn unsecure home routers into slaves for their botnets or even abuse them to steal banking credentials. Know about your router’s hidden weaknesses and the many ways you can defend your homes and businesses against these threats.
Read more