绿盟安全月刊->第53期->最新漏洞 Microsoft Windows NetDDE远程任意指令执行漏洞(MS04-031)

日期：2004-11-05

发布日期：2004-10-12
更新日期：2004-10-14

受影响系统：
Microsoft Windows XP Professional SP1
Microsoft Windows XP Professional
Microsoft Windows XP Home SP1
Microsoft Windows XP Home
Microsoft Windows NT 4.0SP6a
Microsoft Windows 2003
Microsoft Windows 2000SP4
Microsoft Windows 2000SP3
描述：
--------------------------------------------------------------------------------
BUGTRAQ  ID: 11372
CVE(CAN) ID: CAN-2004-0206

Network DDE DSDM（DDE Share Database Manager）服务负责维护所有活动的网络DDE共享的一个列表并管理NetDDE连接。

Microsoft的NetDDE服务由于缺少正确的缓冲区边界检查，远程攻击者可以利用这个漏洞以服务进程权限在系统上执行任意指令。

NetDDE服务默认不启动，此漏洞也可以用于进行本地权限提升攻击或拒绝服务攻击。目前没有详细漏洞细节提供。

<*来源：John Heasman
  
  链接：http://www.microsoft.com/technet/security/bulletin/MS04-031.mspx
*>

建议：
--------------------------------------------------------------------------------
临时解决方法：

如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁：

* 在控制面板中的管理工具中关闭Network DDE服务

厂商补丁：

Microsoft
---------
Microsoft已经为此发布了一个安全公告（MS04-031）以及相应补丁:
MS04-031：Vulnerability in NetDDE Could Allow Remote Code Execution (841533)
链接：http://www.microsoft.com/technet/security/bulletin/MS04-031.mspx

补丁下载：

Microsoft Windows NT Server 4.0 Service Pack 6a

http://www.microsoft.com/downloads/details.aspx?FamilyId=A5CA71B6-8A5E-4AA9-B34E-7CE5B304CFAC

Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6

http://www.microsoft.com/downloads/details.aspx?FamilyId=0A584B37-291C-4B63-971E-FB35CC361B13

Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4

http://www.microsoft.com/downloads/details.aspx?FamilyId=80FE311A-B446-43D0-9614-B93112E28294

Microsoft Windows XP and Microsoft Windows XP Service Pack 1

http://www.microsoft.com/downloads/details.aspx?FamilyId=C6EB8FB6-6AAE-48BC-9E4F-271F81361AE0

Microsoft Windows XP 64-Bit Edition Service Pack 1

http://www.microsoft.com/downloads/details.aspx?FamilyId=7754DB47-5D9E-4652-8634-ECF7B9D6786C

Microsoft Windows XP 64-Bit Edition Version 2003

http://www.microsoft.com/downloads/details.aspx?FamilyId=0C73C1B4-0E12-49F9-BAB7-606B07BFF569

Microsoft Windows Server? 2003

http://www.microsoft.com/downloads/details.aspx?FamilyId=01CFA2F4-19B2-4771-8377-FB633C5BF464

Microsoft Windows Server 2003 64-Bit Edition

http://www.microsoft.com/downloads/details.aspx?FamilyId=0C73C1B4-0E12-49F9-BAB7-606B07BFF569