Check your speedThis patch eliminates a security vulnerability in Microsoft Windows 2000 server products and Systems Management Server. The vulnerability could allow a malicious user to gain control of an affected server.
Microsoft ships two versions of Network Monitor (Netmon): a basic version that ships with Windows NT 4.0 and Windows 2000 server products, and a full version that ships as part of Systems Management Server (SMS) 1.2 and 2.0. Both versions include protocol parsers that aid administrators in interpreting and analyzing previously captured network data. However, several of the parsers have unchecked buffers. If a malicious user delivered a specially malformed frame to a server that was monitoring network traffic, and the administrator parsed it using an affected parser, it would have the effect of either causing Netmon to fail or causing code of the malicious user's choice to run on the machine.
Netmon requires administrative privileges to run, but should only be run by local, rather than domain, administrators. If this is done, the vulnerability could be used to gain complete control over the local machine, but could not be used to gain control over a domain. Netmon does not ship on workstation products, so unless SMS had been installed on a workstation, it would not be affected by this vulnerability.
Read the Netmon Protocol Parsing Vulnerability FAQ.
Note: Netmon does not ship as part of Windows NT 4.0 Workstation or Windows 2000 Professional. These products would only be affected if SMS had been installed on them.
Did you find this download useful?
24 out of 49 users found this download useful
People who downloaded this software also downloaded...
Web Form SPAM Protection 1.5.1
Protect your files against spam spiders by encrypting your Web form code.
SolidShare 2.6.11
Connect anyone on your network to the Internet with one ISP account and one modem.
Anonymity Gateway 2.5
Mask your real IP while surfing and erase traces of online activity.
K16 Parental Monitoring Software 9
Log user activity on your computer and keep record of all keys pressed.
Signed Sealed & Delivered 1.1.4
Put your confidential information in a secure encrypted vault for transfer over the Web.
