This patch eliminates a security vulnerability in Microsoft Windows 2000 server products and Systems Management Server. The vulnerability could allow a malicious user to gain control of an affected server.
Microsoft ships two versions of Network Monitor (Netmon): a basic version that ships with Windows NT 4.0 and Windows 2000 server products, and a full version that ships as part of Systems Management Server (SMS) 1.2 and 2.0. Both versions include protocol parsers that aid administrators in interpreting and analyzing previously captured network data. However, several of the parsers have unchecked buffers. If a malicious user delivered a specially malformed frame to a server that was monitoring network traffic, and the administrator parsed it using an affected parser, it would have the effect of either causing Netmon to fail or causing code of the malicious user's choice to run on the machine.
Netmon requires administrative privileges to run, but should only be run by local, rather than domain, administrators. If this is done, the vulnerability could be used to gain complete control over the local machine, but could not be used to gain control over a domain. Netmon does not ship on workstation products, so unless SMS had been installed on a workstation, it would not be affected by this vulnerability.
Read the Netmon Protocol Parsing Vulnerability <font face='arial,helvetica' size=-1><a href=""http://www.microsoft.com/technet/security/bulletin/fq00-083.asp"">FAQ</a></font>.
People who downloaded this software also downloaded...
Pop Up Blocker Pro 7.0.6a
Block spam and pop-ups and erase files generated by Web surfing.
Pop Up Blocker Pro Rich Media Ads Edition 5.0.1
Block annoying Internet ads, such as videos, background sounds, Java applets, and Flash movies.
Anti-AD Guard PRO 2.1 build 2127
Filter and stop browsers from loading ads.
PC Pandora 4.245
Monitor PC and Internet activities.
Pop-Up No-No 2.1
Block pop-up, pop-under, multimedia Flash, and messenger service ads.
FileWipeOut 2.0.4
Delete files with no chance to recover them.
GIRIST 1.0
Compare and recognize iris.
HT Employee Monitor 5.2
Monitor & capture all employees' PC activities, receive reports via email.
PSentry Enterprise 3
Control and monitor Web activities.
Activity Monitor 4.41 build 2253
Monitor the time and activity of users on network computers.





