| Patch Name : |
WindowsServer2003-KB974318-x86-ENU.exe |
| Patch Description : |
Security Update for Windows Server 2003 (KB974318) |
| Bulletin Id : |
MS09-071 |
| Bulletin Title : |
Vulnerabilities in Internet Authentication Service Could Allow Remote Code Execution (974318) |
| KnowledgeBase : | 974318 |
| Severity : |
Important |
| Location Path : | WindowsServer2003-KB974318-x86-ENU.exe |
| Bulletin Summary: |
These vulnerabilities could allow remote code execution if messages received by the Internet Authentication Service server are copied incorrectly into memory when handling PEAP authentication attempts. An attacker who successfully exploited either of these vulnerabilities could take complete control of an affected system. Servers using Internet Authentication Service are only affected when using PEAP with MS-CHAP v2 authentication. |
| Superceding Bulletin Id : |
None |
| Patch Release Date : |
Dec 8, 2009 |
| CVE Id : | CVE-2009-2505 |
| Affected Product Information |
|
| Product Name |
Service Pack Name |
| Windows Server 2003 for Small Business Server | Windows Server 2003 Service Pack 2 |
| Windows Server 2003, Datacenter Edition | Windows Server 2003 Service Pack 2 |
| Windows Server 2003, Enterprise Edition | Windows Server 2003 Service Pack 2 |
| Windows Server 2003, Standard Edition | Windows Server 2003 Service Pack 2 |
| Windows Server 2003, Web Edition | Windows Server 2003 Service Pack 2 |
|
| File changes |
|
| File Path |
Version |
| %windir%\system32\Rastls.dll | 5.2.3790.4600 |
|
| Registry changes |
|
| Registry Path |
Key Name |
Key Value |
| No records found | | |
