Signature Detail

DNS: Name Authority Pointer Integer Overflow

This signature detects attempts to exploit a known vulnerability in the Microsoft DNS server. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

The Microsoft Windows DNS Server is prone to a remote heap-based memory corruption vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in the complete compromise of affected computers.

Affected Products

• Microsoft Windows Server 2008 SP2 Beta
• Microsoft Windows Server 2008 - Sp2 Enterprise X64
• Microsoft Windows Server 2008 Datacenter Edition Release Candidate
• Microsoft Windows Server 2008 Datacenter Edition SP2
• Microsoft Windows Server 2008 Datacenter Edition
• Microsoft Windows Server 2008 Enterprise Edition Release Candidate
• Microsoft Windows Server 2008 Enterprise Edition SP2
• Microsoft Windows Server 2008 Enterprise Edition
• Microsoft Windows Server 2008 for 32-bit Systems SP2
• Microsoft Windows Server 2008 for 32-bit Systems
• Microsoft Windows Server 2008 for Itanium-based Systems R2
• Microsoft Windows Server 2008 for Itanium-based Systems SP2
• Microsoft Windows Server 2008 for Itanium-based Systems
• Microsoft Windows Server 2008 for x64-based Systems R2
• Microsoft Windows Server 2008 for x64-based Systems SP2
• Microsoft Windows Server 2008 for x64-based Systems
• Microsoft Windows Server 2008 R2 Datacenter SP1
• Microsoft Windows Server 2008 R2 Datacenter
• Microsoft Windows Server 2008 R2 Enterprise Edition
• Microsoft Windows Server 2008 R2 for x64-based Systems SP1
• Microsoft Windows Server 2008 R2 Itanium SP1
• Microsoft Windows Server 2008 R2 Itanium
• Microsoft Windows Server 2008 R2 Standard Edition
• Microsoft Windows Server 2008 R2 x64 SP1
• Microsoft Windows Server 2008 R2 x64
• Microsoft Windows Server 2008 Standard Edition - Gold
• Microsoft Windows Server 2008 Standard Edition - Gold Datacenter
• Microsoft Windows Server 2008 Standard Edition - Gold Enterprise
• Microsoft Windows Server 2008 Standard Edition - Gold Hpc
• Microsoft Windows Server 2008 Standard Edition - Gold Itanium
• Microsoft Windows Server 2008 Standard Edition - Gold Standard
• Microsoft Windows Server 2008 Standard Edition - Gold Storage
• Microsoft Windows Server 2008 Standard Edition - Gold Web
• Microsoft Windows Server 2008 Standard Edition Itanium
• Microsoft Windows Server 2008 Standard Edition R2
• Microsoft Windows Server 2008 Standard Edition R2 SP1
• Microsoft Windows Server 2008 Standard Edition Release Candidate
• Microsoft Windows Server 2008 Standard Edition SP2
• Microsoft Windows Server 2008 Standard Edition - Sp2 Hpc
• Microsoft Windows Server 2008 Standard Edition - Sp2 Storage
• Microsoft Windows Server 2008 Standard Edition - Sp2 Web
• Microsoft Windows Server 2008 Standard Edition

References

• BugTraq: 49012
• CVE: CVE-2011-1966