Alert GCSA-08104 - MS08-063 Vulnerabilita' in Microsoft SMB (957095)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



************************************************************************

      Alert ID : GCSA-08104
          Data : 15 Ottobre 2008
        Titolo : MS08-063 Vulnerabilita' in Microsoft SMB

************************************************************************


:: Descrizione del problema

   Questo aggiornamento di sicurezza risolve una vulnerabilita'
   relativa a Microsoft Server Message Block Protocol (SMB).

   La vulnerabilita' consente ad un attaccante remoto di eseguire codice
   arbitrario.

:: Software e Sistemi affetti

   Microsoft Windows 2000 SP4

   Microsoft Windows XP SP2
   Microsoft Windows XP SP3

   Microsoft Windows XP Professional x64
   Microsoft Windows XP Professional x64 SP2

   Microsoft Windows Server 2003 SP1
   Microsoft Windows Server 2003 SP2

   Microsoft Windows Server 2003 x64
   Microsoft Windows Server 2003 x64 SP2

   Microsoft Windows Server 2003 per Itanium SP1
   Microsoft Windows Server 2003 per Itanium SP2

   Microsoft Windows Vista
   Microsoft Windows Vista SP1

   Microsoft Windows Vista x64
   Microsoft Windows Vista x64 SP1

   Microsoft Windows Server 2008 per sistemi 32-bit
   Microsoft Windows Server 2008 per sistemi x64
   Microsoft Windows Server 2008 per sistemi Itanium


:: Impatto

   Esecuzione remota di codice arbritario


:: Soluzioni

   Applicare la patch segnalata nel bollettino Microsoft MS08-063
   http://www.microsoft.com/technet/security/bulletin/Ms08-063.mspx


:: Riferimenti

Microsoft Security Bulletin MS08-063
   http://www.microsoft.com/technet/security/bulletin/Ms08-063.mspx

FrSirt:
   http://www.frsirt.com/english/advisories/2008/2814

Secunia:
   http://secunia.com/advisories/32249/

SecurityFocus:
   http://www.securityfocus.com/bid/31647

CVE Mitre:
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4038



-----BEGIN PGP SIGNATURE-----

iQCVAwUBSPX/bvOB+SpikaiRAQJEHAP/RW0AeMr9x6guA5wNYrztWUu0TJ0wBuf6
sUmzPMHY61+YCTaG1tUKK635zHN5mWXyZUfektI0ZOo9a/qySwSK7Kq/e100ZX24
SpZD+Ttx4ivLyaK9RtWQleQVBB6SQJZ3YvEfyuVLc6xhvu6nLoP5TgWfO5AvKA3t
fjXfVuId06s=
=1y+q
-----END PGP SIGNATURE-----