SNMP Buffer Overrun Affects Windows -- Redmondmag.com

SNMP Buffer Overrun Affects Windows

By Scott Bekker
02/13/2002

Microsoft Corp. on Tuesday advised users of its Windows server and client operating systems to disable the SNMP service if it is running because of a buffer overrun vulnerability in the industry-standard protocol.

Microsoft's Security Bulletin (MS02-006) accompanied a larger security advisory from the CERT/CC detailing how the SNMP vulnerability impacted operating systems, applications and hardware from dozens of vendors.

SNMP or Simple Network Management Protocol is for managing network devices, so the vulnerability affects computers, firewalls, routers and other products. A buffer overrun present in all implementations, can allow an attacker to cause denial of service or run code in LocalSystem context.

The SNMP service is disabled by default in all versions of Windows from Windows 95 and Windows NT up through Windows XP and Windows 2000 Server. Windows ME does not provide an SNMP implementation.

"A patch is under development to eliminate the vulnerability," Microsoft's security bulletin notes. "In the meantime, Microsoft recommends that customers who use the SNMP service disable it temporarily. Patches will be available shortly."

Microsoft classifies the SNMP vulnerability as a low risk on affected Internet servers, a moderate risk on affected intranet servers and a moderate risk on affected client systems.

Instructions for disabling the service are provided in the bulletin.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

Cisco Warns of Brute Force Attacks Targeting VPNs and Firewalls

Cisco has revealed that a global increase in brute force attacks targeting Virtual Private Networks (VPNs) and other devices is currently taking place.
What's Inside Microsoft 365's Security Toolbox?

Microsoft provides plenty of native tools to secure Microsoft 365. IT pros just have to know where to look.
Microsoft Kills 30-Day Data Retention Policy for Copilot in Fabric

Microsoft this week announced several usability improvements coming to Copilot in Fabric in preparation of its general availability release later this year.
Using Microsoft Office to Build a Network Diagram 2

Now that we've set up our process, let's dig in with the actual execution.
Microsoft Graph 'Activity Logs' Feature Goes Live

Microsoft announced the general availability of the "activity logs" capability in Microsoft Graph, giving administrators more options to track user activity and identify patterns of potential misuse.