安全研究

安全漏洞
Microsoft Windows SSL远程拒绝服务漏洞(MS04-011)

发布日期:2004-04-13
更新日期:2004-04-19

受影响系统:
Microsoft Windows XP
Microsoft Windows 2003
Microsoft Windows 2000
描述:
BUGTRAQ  ID: 10115
CVE(CAN) ID: CVE-2004-0120

Microsoft Windows是一款微软开发的操作系统。

Microsoft Windows包含的SSL库实现处理畸形SSL消息时存在问题,远程攻击者可以利用这个漏洞使系统停止对SSL连接的响应,在Windows 2003系统中还可以使系统重新启动。

目前没有详细漏洞细节提供。

<*来源:John Lampe (jwlampe@nessus.org
  
  链接:http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx
*>

建议:
厂商补丁:

Microsoft
---------
Microsoft已经为此发布了一个安全公告(MS04-011)以及相应补丁:
MS04-011:Security Update for Microsoft Windows (835732)
链接:http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

补丁下载:

Microsoft Windows 2000 Service Pack 2, Microsoft Windows 2000 Service Pack 3, and Microsoft Windows 2000 Service Pack 4

http://www.microsoft.com/downloads/details.aspx?FamilyId=0692C27E-F63A-414C-B3EB-D2342FBB6C00&displaylang=en

Microsoft Windows XP and Microsoft Windows XP Service Pack 1

http://www.microsoft.com/downloads/details.aspx?FamilyId=3549EA9E-DA3F-43B9-A4F1-AF243B6168F3&displaylang=en

Microsoft Windows XP 64-Bit Edition Service Pack 1

http://www.microsoft.com/downloads/details.aspx?FamilyId=C6B55EF2-D9FE-4DBE-AB7D-73A20C82FF73&displaylang=en

Microsoft Windows XP 64-Bit Edition Version 2003

http://www.microsoft.com/downloads/details.aspx?FamilyId=C207D372-E883-44A6-A107-6CD2D29FC6F5&displaylang=en

Microsoft Windows Server 2003

http://www.microsoft.com/downloads/details.aspx?FamilyId=EAB176D0-01CF-453E-AE7E-7495864E8D8C&displaylang=en

Microsoft Windows Server 2003 64-Bit Edition

http://www.microsoft.com/downloads/details.aspx?FamilyId=C207D372-E883-44A6-A107-6CD2D29FC6F5&displaylang=en

浏览次数:3664
严重程度:10(网友投票)
本安全漏洞由绿盟科技翻译整理,版权所有,未经许可,不得转载
绿盟科技给您安全的保障