Services for Unix 2.0 Telnet and NFS Services Contain Memory Leaks New

A security vulnerability exists in the implementation of Telnet and NFS in Services for Unix (SFU) 2.0 which could allow a malicious user to cause a denial of service failure.

Issue

Among the components provided by Services for Unix (SFU) 2.0 are services that implement the NFS (Network File System) and Telnet protocols. Both services contain memory leaks that could be triggered by a user request. An attacker who repeatedly sent such a request could deplete the kernel memory on the server to the point where performance slowed and the system could potentially fail.

Affected Products

• Microsoft Services for Unix 2.0

Solution

A software patch is available from the following locations:

Windows NT 4.0

• NFS Patch
• Telnet Patch

Windows 2000

• NFS Patch
• Telnet Patch

Further Details

Source: Microsoft Corporation

Reference: Microsoft Corporation

Updated: July 23, 2001

>> Recommended Download - secure your PC from spyware, adware and malware now with Spyware Doctor <<