[SECURITY-L] CAIS-Alerta: Vulnerabilidade na pilha Bluetooth (MS08-030)

[CSIRT - UNICAMP]

----- Forwarded message from Centro de Atendimento a Incidentes de Seguranca <cais em cais.rnp.br> -----

From: Centro de Atendimento a Incidentes de Seguranca <cais em cais.rnp.br>
Subject:  CAIS-Alerta: Vulnerabilidade na pilha Bluetooth (MS08-030)
To: pop-seg em cais.rnp.br, rnp-alerta em cais.rnp.br, rnp-seg em cais.rnp.br
Date: Wed, 11 Jun 2008 11:45:43 -0300 (BRT)

-----BEGIN PGP SIGNED MESSAGE-----


Prezados,

O CAIS esta' repassando o alerta da Microsoft, intitulado "MS08-030 - 
Vulnerability in Bluetooth Stack Could Allow Remote Code Execution 
(951376)", que trata de uma vulnerabilidade na pilha (stack) Bluetooth de 
diversas versoes do Sistema Operacional Microsoft Windows.

A vulnerabilidade em questao esta' na forma como a pilha Bluetooth de 
alguns sistemas Microsoft Windows trata um grande numero de requisicoes do 
tipo "service description".

Caso um atacante consiga explorar com sucesso esta vulnerabilidade, ele 
podera' obter obter controle total sobre o sistema afetado.


Sistemas afetados:

. Windows XP Service Pack 2
. Windows XP Service Pack 3
. Windows XP Professional x64 Edition
. Windows XP Professional x64 Edition Service Pack 2 
. Windows Vista
. Windows Vista Service Pack 1
. Windows Vista x64 Edition
. Windows Vista x64 Edition Service Pack 1


Correcoes disponiveis:

Recomenda-se fazer a atualizacao para as versoes disponiveis em:

. Windows XP Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?familyid=980bb421-950f-4825-8039-44cc961a47b8

. Windows XP Service Pack 3
  http://www.microsoft.com/downloads/details.aspx?familyid=980bb421-950f-4825-8039-44cc961a47b8

. Windows XP Professional x64 Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=81ab56ca-933f-4974-a393-290a54c30a78

. Windows XP Professional x64 Edition Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?familyid=81ab56ca-933f-4974-a393-290a54c30a78

. Windows Vista
  http://www.microsoft.com/downloads/details.aspx?familyid=6524debe-be50-44d1-8543-af0bfaf086ad

. Windows Vista Service Pack 1
  http://www.microsoft.com/downloads/details.aspx?familyid=6524debe-be50-44d1-8543-af0bfaf086ad

. Windows Vista x64 Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=6adee8b9-3455-4f3b-8bdd-2585c8ff83b8

. Windows Vista x64 Edition Service Pack 1
  http://www.microsoft.com/downloads/details.aspx?familyid=6adee8b9-3455-4f3b-8bdd-2585c8ff83b8


Mais informacoes:

. MS08-030 - Vulnerability in Bluetooth Stack Could Allow Remote Code Execution (951376)
  http://www.microsoft.com/technet/security/Bulletin/MS08-030.mspx

. SANS ISC Handler's Diary 2008-06-10: June 2008 Black Tuesday Overview
  http://isc.sans.org/diary.html?storyid=4552

. Microsoft Brasil Security
  http://www.microsoft.com/brasil/security

. Technet Brasil - Central de Seguranca
  http://www.technetbrasil.com.br/seguranca

. Windows Live OneCare
  http://safety.live.com/site/pt-BR/default.htm


Identificador CVE (http://cve.mitre.org): CVE-2008-1453


O CAIS recomenda que os administradores mantenham seus sistemas e 
aplicativos sempre atualizados, de acordo com as ultimas versoes e 
correcoes oferecidas pelos fabricantes.


Os Alertas do CAIS tambem sao oferecidos no formato RSS/RDF:
http://www.rnp.br/cais/alertas/rss.xml


Atenciosamente,

################################################################
#   CENTRO DE ATENDIMENTO A INCIDENTES DE SEGURANCA (CAIS)     #
#       Rede Nacional de Ensino e Pesquisa (RNP)               #
#                                                              #
# cais em cais.rnp.br       http://www.cais.rnp.br                #
# Tel. 019-37873300      Fax. 019-37873301                     #
# Chave PGP disponivel   http://www.rnp.br/cais/cais-pgp.key   #
################################################################
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iQCVAwUBSE/lHekli63F4U8VAQFOGAP+NfK9nUXbJbjXmeb9JXa//5m5aLhVc/Zg
vEUQNDB0q+G5IV99CaTeMDuMFw/rbDDhHQlvd1JwfyB0uGCfFlUH97r8Ve1i9/i3
5neKHTFLRDigGHs56UbFOcOj/Ib/UukqIC98dFsK8Bd6AP4JFqs2456Y/zSqTRky
VAADpfyWOE0=
=RNs6
-----END PGP SIGNATURE-----

----- End forwarded message -----