Microsoft Windows DNS Server Escaped Zone Name Parameter Buffer Overflow Vulnerability

Threat level definition

Microsoft Windows DNS Server Escaped Zone Name Parameter Buffer Overflow Vulnerability

References:

Handler's Diary: Microsoft Vulnerability in RPC on Windows DNS Server (SANS)
Lessons Learned from MS07-029: The DNS RPC Interface Buffer Overrun (Michael Howard)
Microsoft Knowledge Base Artcile 936263: New KB article to help deploy DNS remot (Microsoft)
Microsoft Security Advisory (935964) (Microsoft)
Microsoft Security Bulletin MS07-029 (Microsoft)
Microsoft Windows Homepage (Microsoft)
Nortel Response to Microsoft Security Bulletin MS07-029 - BULLETIN ID: 200700797 (Nortel)
Update on Microsoft Security Advisory 935964 (Microsoft)
Microsoft DNS Server Remote Code execution: Analysis and exploit (mballano@gmail.com)
EEYEZD-20070407 Microsoft DNS RPC (eEye Digital Security)
Microsoft Security Advisory 935964 Posted (Microsoft Security Response Center)
US-CERT Vulnerability Note VU#555920 - Microsoft Windows DNS RPC buffer overflow (US-CERT)
Vulnerability in RPC on Windows DNS Server Could Allow Remote Code Execution (US-CERT)

Privacy Statement
Copyright 2007, SecurityFocus