MS11-004: Vulnerability in Internet Information Services (IIS) FTP Service Could Allow Remote Code Execution (2489256)

NASLDB: MS11-004: Vulnerability in Internet Information Services (IIS) FTP Service Could Allow Remote Code Execution (2489256)

General

ID: 51904
Name: MS11-004: Vulnerability in Internet Information Services (IIS) FTP Service Could Allow Remote Code Execution (2489256)

Summary: Checks version of ftpsvc.dll

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Temporal Vector: CVSS2#E:POC/RL:OF/RC:C

Port: 139
Family: Windows : Microsoft Bulletins
Type: Local

Description

The IIS FTP service running on the remote host has a heap buffer
overflow vulnerability. The ‘TELNET_STREAM_CONTEXT::OnSendData’
function fails to properly sanitize user input, resulting in a buffer
overflow.

An unauthenticated, remote attacker can exploit this to execute
arbitrary code.

Exploiting

Exploit Available: True
Exploitability Ease: Exploits are available

Sources

CVE: CVE-2010-3972
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2010/12/21
Patch Release: 2011/02/08
Plugin Release: 2011/02/08

Plugin

Version: 1.13
Filename: smb_nt_ms11-004.nasl
Filesize: 4910 bytes
MD5 Hash: 702877979c8e0a4b50623565c76fca72

Identification: Host/patch_management_checks
Require Keys: SMB/MS_Bulletin_Checks/Possible
Dependencies: "smb_hotfixes.nasl", "smb_enum_services.nasl", "ms_bulletin_checks_possible.nasl"