RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption

[Tina Bird <tbird@xxxxxxxxxxxxxxxxxxxxxxx>]

On Tue, 10 Feb 2004, Marc Maiffret wrote:

> This attack can be performed through various encryption systems such as
> Kerberos and almost anything using CERTs... I am not sure about
> Microsofts wording in their advisory.

Microsoft also states that servers are likelier to be attacked using this
vulnerability than clients are, because they're likelier to be decoding
ASN.1 data.  But if the vulnerable code can be accessed via LSASS.exe,
doesn't that mean all systems are at risk?

thanks for any info -- tbird

--
It doesn't have to be our fault to be our responsibility.

                                 -- Paul Robertson

http://www.precision-guesswork.com
Log Analysis http://www.loganalysis.org
VPN http://vpn.shmoo.com
tbird's Security Alerts http://securecomputing.stanford.edu/alert.html