Signature Detail
Short Name |
TFTP:MRIS-ACCESS-VIOLATE |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
TFTP |
Keywords |
Microsoft Remote Installation Service Access Violation |
Release Date |
2006/12/12 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TFTP: Microsoft Remote Installation Service Access Violation
This signature detects attempts to exploit a known vulnerability against Microsoft Remote Installation Service. A successful attack can lead to arbitrary code execution on the installed nodes.
Extended Description
Microsoft Windows is prone to a remote code-execution vulnerability. A remote attacker may exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in a complete compromise of vulnerable computers. Note that this issue affects only Microsoft Windows 2000. Note also that the Remote Installation Services (RIS) is not installed by default on Microsoft Windows 2000.
Affected Products
- Avaya Agent Access
- Avaya Basic Call Management System Reporting Desktop server
- Avaya Basic Call Management System Reporting Desktop
- Avaya CMS Supervisor
- Avaya Computer Telephony
- Avaya Contact Center Express
- Avaya CVLAN
- Avaya Enterprise Management
- Avaya Integrated Management
- Avaya Interaction Center
- Avaya Interaction Center - Voice Quick Start
- Avaya IP Agent
- Avaya IP Softphone
- Avaya Modular Messaging (MAS)
- Avaya Network Reporting
- Avaya OctelAccess(r) Server
- Avaya OctelDesignerTM
- Avaya Operational Analyst
- Avaya Outbound Contact Management
- Avaya Speech Access
- Avaya Unified Communication Center
- Avaya Unified Messenger (r)
- Avaya Visual Messenger TM
- Avaya Visual Vector Client
- Avaya VPNmanagerTM Console
- Avaya Web Messenger
- Microsoft Windows 2000 Advanced Server SP1
- Microsoft Windows 2000 Advanced Server SP2
- Microsoft Windows 2000 Advanced Server SP3
- Microsoft Windows 2000 Advanced Server SP4
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Datacenter Server SP1
- Microsoft Windows 2000 Datacenter Server SP2
- Microsoft Windows 2000 Datacenter Server SP3
- Microsoft Windows 2000 Datacenter Server SP4
- Microsoft Windows 2000 Datacenter Server
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP3
- Microsoft Windows 2000 Professional SP4
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Server SP1
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP3
- Microsoft Windows 2000 Server SP4
- Microsoft Windows 2000 Server
References