Trend Micro Security

MS10-101:Windows Netlogon サービスの脆弱性により、サービス拒否が起こる (2207559)

  危険度: :
  CVE識別番号: CVE-2010-2742

  概要

This update resolves a vulnerability in the Netlogon RPC Service on affected versions of Windows Server that are configured to serve as domain controllers. If an attacker with administrator privileges on a machine sends a specially crafted RPC packet to the Netlogon RPC Service interface, the vulnerability could allow denial of service on the affected system. More specifically, this update addresses the vulnerability by correcting the validation of user-provided data in the Netlogon RPC Service interface.

  トレンドマイクロの対策

詳しい情報については以下のサイトをご参照ください。

  対応方法

  影響を受けるソフトウェア

  • Windows Server 2003 Service Pack 2
  • Windows Server 2003 x64 Edition Service Pack 2
  • Windows Server 2003 with SP2 for Itanium-based Systems
  • Windows Server 2008 for 32-bit Systems and Windows Server 2008 for 32-bit Systems Service Pack 2*
  • Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based Systems Service Pack 2*
  • Windows Server 2008 R2 for x64-based Systems*