Signature Detail
Short Name |
APP:KERBEROS:MS-KERB-ASN-BIT |
|---|---|
Severity |
Critical |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Kerberos Microsoft ASN.1 Library Bit String Heap Corruption |
Release Date |
2004/02/11 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Kerberos Microsoft ASN.1 Library Bit String Heap Corruption
This signature detects attempts to exploit a known vulnerability in the ASN.1 library of a Microsoft Kerberos server. Attackers can send a malicious request to a Kerberos server, which can result in executing arbitrary code.
Extended Description
A vulnerability has been reported in the Microsoft ASN.1 library. This issue is related to insufficient checking of data supplied via an externally supplied length field in ASN.1 BER encoded data. This could result in an excessive value being used in a heap allocation routine, allowing for large amounts of heap memory to be corrupted. This could be leveraged to corrupt sensitive values in memory, resulting in execution of arbitrary code. This vulnerability is exposed in a number of security related operating system components, including Kerberos (via UDP port 88), Microsoft IIS with SSL support enabled and NTLMv2 authentication (via TCP ports 135, 139 and 445). Other components may also be affected, though a comprehensive list is not available at this time. It should be noted that because ASN.1 data will likely be encoded, for example Kerberos, SSL, IPSec or Base64 encoded, the malicious integer values may be obfuscated and as a result not easily detectable.
Affected Products
- AOL Instant Messenger 5.0.2938
- AOL Instant Messenger 5.1.3036
- AOL Instant Messenger 5.2.3292
- Intuit Quicken 2003
- Microsoft Exchange Server 2000 SP1
- Microsoft Exchange Server 2000 SP2
- Microsoft Exchange Server 2000 SP3
- Microsoft Exchange Server 2000
- Microsoft Exchange Server 2003
- Microsoft IIS 5.0
- Microsoft IIS 5.1
- Microsoft IIS 6.0
- Microsoft Internet Explorer 6.0
- Microsoft Internet Explorer 6.0 SP1
- Microsoft Small Business Server 2000
- Microsoft Windows 2000 Advanced Server SP1
- Microsoft Windows 2000 Advanced Server SP2
- Microsoft Windows 2000 Advanced Server SP3
- Microsoft Windows 2000 Advanced Server SP4
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP3
- Microsoft Windows 2000 Professional SP4
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Server SP1
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP3
- Microsoft Windows 2000 Server SP4
- Microsoft Windows 2000 Server
- Microsoft Windows 98
- Microsoft Windows 98SE
- Microsoft Windows NT Server 4.0
- Microsoft Windows NT Server 4.0 SP1
- Microsoft Windows NT Server 4.0 SP2
- Microsoft Windows NT Server 4.0 SP3
- Microsoft Windows NT Server 4.0 SP4
- Microsoft Windows NT Server 4.0 SP5
- Microsoft Windows NT Server 4.0 SP6
- Microsoft Windows NT Server 4.0 SP6a
- Microsoft Windows NT Terminal Server 4.0
- Microsoft Windows NT Terminal Server 4.0 SP1
- Microsoft Windows NT Terminal Server 4.0 SP2
- Microsoft Windows NT Terminal Server 4.0 SP3
- Microsoft Windows NT Terminal Server 4.0 SP4
- Microsoft Windows NT Terminal Server 4.0 SP5
- Microsoft Windows NT Terminal Server 4.0 SP6
- Microsoft Windows NT Workstation 4.0
- Microsoft Windows NT Workstation 4.0 SP1
- Microsoft Windows NT Workstation 4.0 SP2
- Microsoft Windows NT Workstation 4.0 SP3
- Microsoft Windows NT Workstation 4.0 SP4
- Microsoft Windows NT Workstation 4.0 SP5
- Microsoft Windows NT Workstation 4.0 SP6
- Microsoft Windows NT Workstation 4.0 SP6a
- Microsoft Windows Server 2003 Datacenter Edition
- Microsoft Windows Server 2003 Datacenter Edition Itanium
- Microsoft Windows Server 2003 Enterprise Edition
- Microsoft Windows Server 2003 Enterprise Edition Itanium
- Microsoft Windows Server 2003 Standard Edition
- Microsoft Windows Server 2003 Web Edition
- Microsoft Windows XP 64-bit Edition SP1
- Microsoft Windows XP 64-bit Edition
- Microsoft Windows XP 64-bit Edition Version 2003 SP1
- Microsoft Windows XP 64-bit Edition Version 2003
- Microsoft Windows XP Home SP1
- Microsoft Windows XP Home
- Microsoft Windows XP Professional SP1
- Microsoft Windows XP Professional
- VanDyke SecureCRT 2.4.0
- VanDyke SecureCRT 3.0.0
- VanDyke SecureCRT 3.1.0
- VanDyke SecureCRT 3.1.1
- VanDyke SecureCRT 3.1.2
- VanDyke SecureCRT 3.2.0
- VanDyke SecureCRT 3.2.1
- VanDyke SecureCRT 3.2.2
- VanDyke SecureCRT 3.3.0
- VanDyke SecureCRT 3.3.1
- VanDyke SecureCRT 3.3.2
- VanDyke SecureCRT 3.3.3
- VanDyke SecureCRT 3.3.4
- VanDyke SecureCRT 3.4.0
- VanDyke SecureCRT 3.4.1
- VanDyke SecureCRT 3.4.2
- VanDyke SecureCRT 3.4.3
- VanDyke SecureCRT 3.4.4
- VanDyke SecureCRT 3.4.5
- VanDyke SecureCRT 3.4.6
- VanDyke SecureCRT 3.4.7
- VanDyke SecureCRT 3.4.8
- VanDyke SecureCRT 4.0.1
- VanDyke SecureCRT 4.0.2
- VanDyke SecureCRT 4.0.3
- VanDyke SecureCRT 4.0.4
- VanDyke SecureCRT 4.0.5
- Yahoo! Messenger 5.6.0
- Yahoo! Messenger 5.6.0 .0.1347
- Yahoo! Messenger 5.6.0 .0.1351
- Yahoo! Messenger 5.6.0 .0.1355
- Yahoo! Messenger 5.6.0 .0.1356
- Yahoo! Messenger 5.6.0 .0.1358
References