[SECURITY-L] CAIS-Alerta: Vulnerabilidades no Kernel do Windows (MS06-051)

[CSIRT - UNICAMP]

--------------------------- Mensagem Original ----------------------------
Assunto: CAIS-Alerta: Vulnerabilidades no Kernel do Windows (MS06-051)
De:      "Centro de Atendimento a Incidentes de Seguranca" <cais em cais.rnp.br>
Data:    Ter, Agosto 8, 2006 5:28 pm
Para:    rnp-alerta em cais.rnp.br
         rnp-seg em cais.rnp.br
--------------------------------------------------------------------------

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Prezados,

O CAIS esta' repassando o alerta da Microsoft, intitulado "MS06-051 -
Vulnerability in Windows Kernel Could Result in Remote Code Execution
(917422)", que trata de duas vulnerabilidades identificadas no Kernel do
Microsoft Windows e que podem ser exploradas remotamente, permitindo o
controle completo do sistema atacado.

A primeira vulnerabilidade esta' relacionada com a forma que o Windows
2000 inicia as aplicacoes, permitindo que um usuario registrado no sistema
escale privilegios e tome controle total do sistema afetado. A segunda
vulnerabilidade ocorre pela forma que o Windows lida com excecoes de
multiplas aplicacoes que estao residentes em memoria.


Sistemas afetados:

. Microsoft Windows 2000 Service Pack 4
. Microsoft Windows XP Service Pack 1
. Microsoft Windows XP Service Pack 2
. Microsoft Windows XP Professional x64 Edition
. Microsoft Windows Server 2003
. Microsoft Windows Server 2003 Service Pack 1
. Microsoft Windows Server 2003 para sistemas Itanium
. Microsoft Windows Server 2003 com SP1 para sistemas Itanium
. Microsoft Windows Server 2003 x64 Edition


Correcoes disponiveis:

Recomenda-se fazer a atualizacao para as versoes disponiveis em:

. Microsoft Windows 2000 Service Pack 4
  http://www.microsoft.com/downloads/details.aspx?FamilyId=83e0c6fb-a542-463a-88fd-dc388605a8ae

. Microsoft Windows XP Service Pack 1
  http://www.microsoft.com/downloads/details.aspx?FamilyId=71e96afc-bc4d-4666-998b-49857007e539

. Microsoft Windows XP Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?FamilyId=71e96afc-bc4d-4666-998b-49857007e539

. Microsoft Windows XP Professional x64 Edition
  http://www.microsoft.com/downloads/details.aspx?FamilyId=a6fe5b95-11d1-42cd-995c-c8cef8a27aef

. Microsoft Windows Server 2003
  http://www.microsoft.com/downloads/details.aspx?FamilyId=7d0f888b-df35-40df-baff-0bae2b921aef

. Microsoft Windows Server 2003 Service Pack 1
  http://www.microsoft.com/downloads/details.aspx?FamilyId=7d0f888b-df35-40df-baff-0bae2b921aef

. Microsoft Windows Server 2003 para sistemas Itanium
  http://www.microsoft.com/downloads/details.aspx?FamilyId=df365b0b-f97f-4df1-9105-d81b68a110eb

. Microsoft Windows Server 2003 com SP1 para sistemas Itanium
  http://www.microsoft.com/downloads/details.aspx?FamilyId=df365b0b-f97f-4df1-9105-d81b68a110eb

. Microsoft Windows Server 2003 x64 Edition
  http://www.microsoft.com/downloads/details.aspx?FamilyId=3f750ad5-5bfb-4421-a316-ae66f0557eac


Mais informacoes:

. MS06-051 - Vulnerability in Windows Kernel Could Result in Remote Code
Execution (917422)
  http://www.microsoft.com/technet/security/bulletin/ms06-051.mspx

. Microsoft Brasil Security
  http://www.microsoft.com/brasil/security

. Technet Brasil - Central de Seguranca
  http://www.technetbrasil.com.br/seguranca


Identificador CVE (http://cve.mitre.org): CVE-2006-3443, CVE-2006-3648


O CAIS recomenda que os administradores mantenham seus sistemas e
aplicativos sempre atualizados, de acordo com as ultimas versoes e
correcoes oferecidas pelos fabricantes.

Os Alertas do CAIS tambem sao oferecidos no formato RSS/RDF:
http://www.rnp.br/cais/alertas/rss.xml

Atenciosamente,

################################################################
#   CENTRO DE ATENDIMENTO A INCIDENTES DE SEGURANCA (CAIS)     #
#       Rede Nacional de Ensino e Pesquisa (RNP)               #
#                                                              #
# cais em cais.rnp.br       http://www.cais.rnp.br                #
# Tel. 019-37873300      Fax. 019-37873301                     #
# Chave PGP disponivel   http://www.rnp.br/cais/cais-pgp.key   #
################################################################
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: pgpenvelope 2.10.2 - http://pgpenvelope.sourceforge.net/

iQCVAwUBRNjz2ukli63F4U8VAQIcfQQAvtfbj9fKKCZ6oFFPkjCMxH43SogZsekk
nK1FO9PtzNyGEd1UTQGRi9itp6PXr7q6ns+2G+j87nQGMQn4IV0lo2gB14005pcw
K1bsps8jMtceFErnjouXxmbTA9fBlY7JKX38jTuVPXJ498k19zTWCgQVynEKVKPv
SlazoepSZwo=
=H4Oa
-----END PGP SIGNATURE-----

----- End forwarded message -----