漏洞信息详情

Microsoft Windows内核ICMP路由发现协议远程拒绝服务漏洞

• CNNVD编号：CNNVD-200801-104
• 危害等级： 高危
  
• CVE编号： CVE-2007-0066
• 漏洞类型： 其他
• 发布时间： 2008-01-08
• 威胁类型： 远程
• 更新时间： 2021-07-08
• 厂        商： microsoft
• 漏洞来源： Alex Wheeler Ryan ...

漏洞简介

Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。

在Microsoft Windows 2000 SP4中、XP SP2中、和Server 2003，当ICMP路由器发现协议(RDP)的内核，允许远程攻击者造成通过零碎ICMP路由器广播数据包引发拒绝服务攻击。又名\"Windows内核中的TCP/IP/ICMP的漏洞。\"

漏洞公告

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

Microsoft Windows Server 2003 Datacenter Edition SP1

Microsoft WindowsServer2003-KB941644-x86-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=fda060a5-9a1e -4036-9899-13eb61fdd8be

Microsoft Windows XP Media Center Edition SP2

Microsoft WindowsXP-KB941644-x86-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=0a766242-2342 -4fa0-9b66-8953c54a2211

Microsoft Windows Server 2003 Itanium SP1

Microsoft WindowsServer2003-KB941644-ia64-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=2c2264f7-ebbb -40ab-9dbf-9b4e313665a7

Microsoft Windows Server 2003 Enterprise Edition Itanium SP1

Microsoft WindowsServer2003-KB941644-ia64-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=2c2264f7-ebbb -40ab-9dbf-9b4e313665a7

Microsoft Windows Server 2003 Datacenter x64 Edition SP2

Microsoft WindowsServer2003.WindowsXP-KB941644-x64-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=19d993f9-06dd -4dc4-b0cc-c59e822eb8

Microsoft Windows XP Tablet PC Edition SP2

Microsoft WindowsXP-KB941644-x86-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=0a766242-2342 -4fa0-9b66-8953c54a2211

Microsoft Windows Server 2003 Enterprise Edition Itanium 0

Microsoft WindowsServer2003-KB941644-ia64-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=2c2264f7-ebbb -40ab-9dbf-9b4e313665a7

Microsoft Windows Server 2003 Web Edition SP2

Microsoft WindowsServer2003-KB941644-x86-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=fda060a5-9a1e -4036-9899-13eb61fdd8be

Microsoft Windows XP Professional x64 Edition SP2

Microsoft WindowsServer2003.WindowsXP-KB941644-x64-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=2e8bc7d5-fe81 -4ed5-9efa-360738d160ee

Microsoft Windows Server 2003 x64 SP1

Microsoft WindowsServer2003.WindowsXP-KB941644-x64-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=19d993f9-06dd -4dc4-b0cc-c59e822eb8

Microsoft Windows Server 2003 Standard Edition SP1

Microsoft WindowsServer2003-KB941644-x86-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=fda060a5-9a1e -4036-9899-13eb61fdd8be

Microsoft Windows Server 2003 Standard Edition

Microsoft WindowsServer2003-KB941644-x86-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=fda060a5-9a1e -4036-9899-13eb61fdd8be

Microsoft Windows Server 2003 x64 SP2

Microsoft WindowsServer2003.WindowsXP-KB941644-x64-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=19d993f9-06dd -4dc4-b0cc-c59e822eb8

Microsoft Windows Server 2003 Enterprise x64 Edition

Microsoft WindowsServer2003.WindowsXP-KB941644-x64-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=19d993f9-06dd -4dc4-b0cc-c59e822eb8

Microsoft Windows Server 2003 Datacenter Edition Itanium 0

Microsoft WindowsServer2003-KB941644-ia64-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=2c2264f7-ebbb -40ab-9dbf-9b4e313665a7

Microsoft Windows Server 2003 Datacenter x64 Edition

Microsoft WindowsServer2003.WindowsXP-KB941644-x64-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=19d993f9-06dd -4dc4-b0cc-c59e822eb8

Microsoft Windows Server 2003 Enterprise Edition SP1

Microsoft WindowsServer2003-KB941644-x86-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=fda060a5-9a1e -4036-9899-13eb61fdd8be

Microsoft Windows Server 2003 Datacenter Edition

Microsoft WindowsServer2003-KB941644-x86-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=fda060a5-9a1e -4036-9899-13eb61fdd8be

Microsoft Windows 2000 Advanced Server SP4

Microsoft Windows2000-KB941644-x86-ENU.EXE

http://www.microsoft.com/downloads/details.aspx?FamilyID=980f5457-c7b5 -421c-8643-0e57429ec156

Microsoft Small Business Server 2003 SP2

Microsoft WindowsServer2003-KB941644-x86-ENU.exe

http://www.microsoft.com/downloads/details.aspx?FamilyID=fda060a5-9a1e -4036-9899-13eb61fdd8be

3DM Software Disk Management Software SP2

Microsoft WindowsServer2003-KB941644-x86-ENU.exe

http://ww

参考网址

来源:XF

链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/39254

来源:BID

链接:https://www.securityfocus.com/bid/27139

来源:VUPEN

链接:http://www.vupen.com/english/advisories/2008/0069

来源:ISS

链接:http://www.iss.net/threats/282.HTML

来源:OVAL

链接:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5271

来源:MISC

链接:http://blogs.technet.com/swi/archive/2008/01/08/ms08-001-part-2-the-case-of-the-moderate-icmp-mitigations.aspx

来源:CERT

链接:http://www.us-cert.gov/cas/techalerts/TA08-008A.HTML

来源:HP

链接:http://www.securityfocus.com/archive/1/486317/100/0/threaded

来源:SECTRACK

链接:http://securitytracker.com/id?1019166

来源:SECUNIA

链接:http://secunia.com/advisories/28297

来源:BID

链接:http://www.securityfocus.com/bid/27139

来源:MS

链接:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-001

受影响实体

• Microsoft Windows_xp:-:Sp1:X64  
• Microsoft Windows_2003_server:Sp2:Standard  
• Microsoft Windows_server_2003:X64  
• Microsoft Windows_2003_server:Sp2  
• Microsoft Windows_2003_server:Sp1  

补丁

暂无