• info
• discussion
• exploit
• solution
• references

Microsoft Windows Telnet NTLM Credential Reflection Authentication Bypass Vulnerability

Solution:
The vendor has released an update. Please see the references for more information.


Microsoft Windows XP Media Center Edition SP2

• Microsoft Security Update for Windows XP (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=b3331388-1e52 -4924-b512-23275a8fde84

Microsoft Windows Server 2008 for 32-bit Systems SP2

• Microsoft Security Update for Windows Server 2008 (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=62f2e0a6-5e68 -41c7-a851-d99bcff6ff3e

Microsoft Windows Vista x64 Edition 0

• Microsoft Security Update for Windows Vista for x64-based Systems (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=7a41b8c1-f955 -474e-a08e-5e73964327d1

Microsoft Windows Server 2003 Datacenter x64 Edition SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=e2a788e7-a9d1 -4574-b106-f8ab44c6c4a2

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Security Update for Windows XP (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=b3331388-1e52 -4924-b512-23275a8fde84

Microsoft Windows XP Media Center Edition SP3

• Microsoft Security Update for Windows XP (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=b3331388-1e52 -4924-b512-23275a8fde84

Microsoft Windows Server 2003 Web Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=3fe9c745-d87c -43b0-9b2a-356fb34282b4

Microsoft Windows XP Professional x64 Edition SP2

• Microsoft Security Update for Windows XP x64 Edition (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=a6ee7af3-3e39 -4866-a893-92bf1c786cd4

Microsoft Windows Vista 0

• Microsoft Security Update for Windows Vista (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=d77f406d-11cb -4d19-94ec-938b356c3427

Microsoft Windows Server 2003 x64 SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=e2a788e7-a9d1 -4574-b106-f8ab44c6c4a2

Microsoft Windows Vista x64 Edition SP1

• Microsoft Security Update for Windows Vista for x64-based Systems (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=7a41b8c1-f955 -474e-a08e-5e73964327d1

Microsoft Windows XP Tablet PC Edition SP3

• Microsoft Security Update for Windows XP (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=b3331388-1e52 -4924-b512-23275a8fde84

Microsoft Windows Vista SP1

• Microsoft Security Update for Windows Vista (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=d77f406d-11cb -4d19-94ec-938b356c3427

Microsoft Windows Server 2008 for x64-based Systems 0

• Microsoft Security Update for Windows Server 2008 x64 Edition (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=6e5d1db9-efef -4112-8138-62f14670cf0d

Microsoft Windows Server 2008 for Itanium-based Systems SP2

• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b813c74-b2ae -4962-9ebb-1311193d9e2d

Microsoft Windows 2000 Advanced Server SP4

• Microsoft Security Update for Windows 2000 (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=240977d6-3581 -4058-b9f1-7847e4edcf8a

Microsoft Windows Server 2003 SP2

• Microsoft Security Update for Windows Server 2003 (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=3fe9c745-d87c -43b0-9b2a-356fb34282b4

Microsoft Windows Server 2003 Standard Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=3fe9c745-d87c -43b0-9b2a-356fb34282b4

Microsoft Windows XP Home SP2

• Microsoft Security Update for Windows XP (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=b3331388-1e52 -4924-b512-23275a8fde84

Microsoft Windows Server 2008 for x64-based Systems SP2

• Microsoft Security Update for Windows Server 2008 x64 Edition (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=6e5d1db9-efef -4112-8138-62f14670cf0d

Microsoft Windows 2000 Datacenter Server SP4

• Microsoft Security Update for Windows 2000 (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=240977d6-3581 -4058-b9f1-7847e4edcf8a

Microsoft Windows Server 2003 Itanium SP2

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=4f625d39-29d4 -44f9-b4bd-cd99f1ea422d

Microsoft Windows Vista SP2

• Microsoft Security Update for Windows Vista (KB960859)
  http://www.microsoft.com/downloads/details.aspx?familyid=d77f406d-11cb -4d19-94ec-938b356c3427