Signature Detail
Short Name |
SMB:EXPLOIT:SMB2-ZERO-LEN-WRT |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
SMB |
Keywords |
SMB2 Zero Length Write |
Release Date |
2011/06/13 |
Update Number |
1937 |
Supported Platforms |
idp-4.1.110110609+, isg-3.4.139899+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMB: SMB2 Zero Length Write
This signature detects attempts to exploit a known vulnerability against the Microsoft Server Message Block (SMB) Protocol. A successful attack can lead to arbitrary code execution.
Extended Description
Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the SMB server, denying service to legitimate users.
Affected Products
- Avaya Aura Conferencing 6.0 Standard
- Avaya CallPilot 4.0
- Avaya CallPilot 5.0
- Microsoft Windows 7 for 32-bit Systems SP1
- Microsoft Windows 7 for 32-bit Systems
- Microsoft Windows 7 for x64-based Systems SP1
- Microsoft Windows 7 for x64-based Systems
- Microsoft Windows Server 2008 for 32-bit Systems SP2
- Microsoft Windows Server 2008 for 32-bit Systems
- Microsoft Windows Server 2008 for Itanium-based Systems SP2
- Microsoft Windows Server 2008 for Itanium-based Systems
- Microsoft Windows Server 2008 for x64-based Systems SP2
- Microsoft Windows Server 2008 for x64-based Systems
- Microsoft Windows Server 2008 R2 Itanium SP1
- Microsoft Windows Server 2008 R2 Itanium
- Microsoft Windows Server 2008 R2 x64 SP1
- Microsoft Windows Server 2008 R2 x64
- Microsoft Windows Vista SP1
- Microsoft Windows Vista SP2
- Microsoft Windows Vista x64 Edition SP1
- Microsoft Windows Vista x64 Edition SP2
References
- BugTraq: 48185
- CVE: CVE-2011-1267