National Vulnerability Database (CVE-2005-1983)

National Cyber-Alert System Vulnerability Summary: CVE-2005-1983
Orirignal release date: 2005-08-10 Source: US-CERT/NIST ### Overview Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm. ### Impact CVSS Severity: 10 (High) Range: local,remote Authentication: input buffer="1" Impact Type: sec_prot admin="1" user="1" ### Reference to Advisories, Solutions, and Tools External Source: MS Name: MS05-039 Hyperlink: http://www.microsoft.com/technet/Security/bulletin/ms05-039.mspx External Source: CERT Name: TA05-221A Hyperlink: http://www.us-cert.gov/cas/techalerts/TA05-221A.html External Source: ISS Name: 20050809 Windows Plug and Play Remote Compromise Hyperlink: http://xforce.iss.net/xforce/alerts/id/202 External Source: CERT-VN Name: VU#998653 Hyperlink: http://www.kb.cert.org/vuls/id/998653 External Source: CIAC Name: P-266 Hyperlink: http://www.ciac.org/ciac/bulletins/p-266.shtml External Source: MISC Name: http://www.securiteam.com/windowsntfocus/5YP0E00GKW.html Hyperlink: http://www.securiteam.com/windowsntfocus/5YP0E00GKW.html External Source: MISC Name: http://www.frsirt.com/english/alerts/20050814.ZotobA.php Hyperlink: http://www.frsirt.com/english/alerts/20050814.ZotobA.php External Source: FULLDISC Name: 20050811 Windows 2000 universal exploit for MS05-039 Hyperlink: http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0384.html External Source: BID Name: 14513 Hyperlink: http://www.securityfocus.com/bid/14513 External Source: FRSIRT Name: ADV-2005-1354 Hyperlink: http://www.frsirt.com/english/advisories/2005/1354 External Source: SECUNIA Name: 16372 Hyperlink: http://secunia.com/advisories/16372 External Source: SECTRACK Name: 1014640 Hyperlink: http://securitytracker.com/id?1014640 External Source: OSVDB Name: 18605 Hyperlink: http://www.osvdb.org/18605 External Source: XF Name: win-plugandplay-bo(21602) Hyperlink: http://xforce.iss.net/xforce/xfdb/21602 External Source: MISC Name: http://www.hsc.fr/ressources/presentations/null_sessions/ Hyperlink: http://www.hsc.fr/ressources/presentations/null_sessions/ External Source: OVAL Name: OVAL100073 Hyperlink: http://oval.mitre.org/oval/definitions/data/oval100073.html ### Vulnerable Software and Vendor Windows 2000 (Microsoft) Windows XP (Microsoft) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1983