Signature Detail

DNS: Name Authority Pointer Integer Overflow

This signature detects attempts to exploit a known vulnerability in the Microsoft DNS server. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

The Microsoft Windows DNS Server is prone to a remote heap-based memory corruption vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in the complete compromise of affected computers.

Affected Products

• Microsoft windows_server_2008 SP2 Beta
• Microsoft windows_server_2008 - Sp2 Enterprise X64
• Microsoft windows_server_2008_datacenter_edition Release Candidate
• Microsoft windows_server_2008_datacenter_edition SP2
• Microsoft windows_server_2008_datacenter_edition
• Microsoft windows_server_2008_enterprise_edition Release Candidate
• Microsoft windows_server_2008_enterprise_edition SP2
• Microsoft windows_server_2008_enterprise_edition
• Microsoft windows_server_2008_for_32-bit_systems SP2
• Microsoft windows_server_2008_for_32-bit_systems
• Microsoft windows_server_2008_for_itanium-based_systems R2
• Microsoft windows_server_2008_for_itanium-based_systems SP2
• Microsoft windows_server_2008_for_itanium-based_systems
• Microsoft windows_server_2008_for_x64-based_systems R2
• Microsoft windows_server_2008_for_x64-based_systems SP2
• Microsoft windows_server_2008_for_x64-based_systems
• Microsoft windows_server_2008_r2_datacenter SP1
• Microsoft windows_server_2008_r2_datacenter
• Microsoft windows_server_2008_r2_enterprise_edition
• Microsoft windows_server_2008_r2_for_x64-based_systems SP1
• Microsoft windows_server_2008_r2_itanium SP1
• Microsoft windows_server_2008_r2_itanium
• Microsoft windows_server_2008_r2_standard_edition
• Microsoft windows_server_2008_r2_x64 SP1
• Microsoft windows_server_2008_r2_x64
• Microsoft windows_server_2008_standard_edition - Gold
• Microsoft windows_server_2008_standard_edition - Gold Datacenter
• Microsoft windows_server_2008_standard_edition - Gold Enterprise
• Microsoft windows_server_2008_standard_edition - Gold Hpc
• Microsoft windows_server_2008_standard_edition - Gold Itanium
• Microsoft windows_server_2008_standard_edition - Gold Standard
• Microsoft windows_server_2008_standard_edition - Gold Storage
• Microsoft windows_server_2008_standard_edition - Gold Web
• Microsoft windows_server_2008_standard_edition Itanium
• Microsoft windows_server_2008_standard_edition R2
• Microsoft windows_server_2008_standard_edition R2 SP1
• Microsoft windows_server_2008_standard_edition Release Candidate
• Microsoft windows_server_2008_standard_edition SP2
• Microsoft windows_server_2008_standard_edition - Sp2 Hpc
• Microsoft windows_server_2008_standard_edition - Sp2 Storage
• Microsoft windows_server_2008_standard_edition - Sp2 Web
• Microsoft windows_server_2008_standard_edition

References

• BugTraq: 49012
• CVE: CVE-2011-1966