| Patch Name : |
WindowsServer2003-KB917159-x86-ENU.exe |
| Patch Description : |
Security Update for Windows Server 2003 (KB917159) |
| Bulletin Id : |
MS06-035 |
| Bulletin Title : |
Vulnerability in Server Service Could Allow Remote Code Execution (917159) |
| KnowledgeBase : | 917159 |
| Severity : |
Critical |
| Location Path : | WindowsServer2003-KB917159-x86-ENU.exe |
| Bulletin Summary: |
Mailslot Heap Overflow Vulnerability:
There is a remote code execution vulnerability in the Server driver that could allow an attacker who successfully exploited this vulnerability to take complete control of the affected system.
SMB Information Disclosure Vulnerability:
There is an information disclosure vulnerability in the Server service that could allow an attacker to view fragments of memory used to store SMB traffic during transport. |
| Superceding Bulletin Id : |
MS06-063 |
| Patch Release Date : |
Jul 11, 2006 |
| CVE Id : | CVE-2006-1314 |
| Affected Product Information |
|
| Product Name |
Service Pack Name |
| Windows Server 2003 for Small Business Server | Windows Server 2003 Gold |
| Windows Server 2003, Datacenter Edition | Windows Server 2003 Gold |
| Windows Server 2003, Enterprise Edition | Windows Server 2003 Gold |
| Windows Server 2003, Standard Edition | Windows Server 2003 Gold |
| Windows Server 2003, Web Edition | Windows Server 2003 Gold |
|
| File changes |
|
| File Path |
Version |
| %windir%\system32\drivers\Srv.sys | 5.2.3790.526 |
|
| Registry changes |
|
| Registry Path |
Key Name |
Key Value |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Server 2003\SP2\KB917159 | | -2 |
|
