Microsoft UPnP服务拒绝漏洞

漏洞信息详情

Microsoft UPnP服务拒绝漏洞

• CNNVD编号：CNNVD-200112-013
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2001-0721
  
• 漏洞类型：
  
  
  其他
  
• 发布时间：
  
  2001-12-06
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  microsoft
• 漏洞来源：
  Credited to ‘Ken’ …

Windows 98，98SE，ME，和XP的Universal Plug and Play (UPnP)存在漏洞。远程攻击者借助畸形UPnP请求导致服务拒绝（内存消耗或者崩溃）。

**UPDATE**: New fixes for Windows 98/98SE and Windows Me are available.
Microsoft has released a patch for Windows 98/98SE and Windows Me.
For XP systems, the fix is contained in the update titled “Windows XP Update Package, October 25, 2001”. This fix can be obtained through the WindowsUpdate web site.
See the reference section for a link to the Windows Update website.
Microsoft Windows 98

• Microsoft Q309073
  
  http://download.microsoft.com/download/win98/Patch/Q309073/W98/EN-US/3
  09073USA8.EXE

Microsoft Windows 98SE

• Microsoft Q309073
  
  http://download.microsoft.com/download/win98/Patch/Q309073/W98/EN-US/3
  09073USA8.EXE

Microsoft Windows ME

• Microsoft Q311311
  
  http://download.microsoft.com/download/winme/Update/21388/WinMe/EN-US/
  311311USAM.EXE

来源: MS
名称: MS01-054
链接:http://www.microsoft.com/technet/security/bulletin/MS01-054.asp

来源: BUGTRAQ
名称: 20011109 Important Information Regarding MS01-054 and WindowsME
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=100528449024158&w=2

来源: BUGTRAQ
名称: 20011101 Three Windows XP UPNP DOS attacks
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=100467787323377&w=2