MS00-083: Buffer Overflow in Network Monitor May Cause Vulnerability
This article was previously published under Q274835 On This PageSYMPTOMS
When you use Network Monitor to capture data on your network, a malicious user may be able to send malformed data that can run a program or file on your computer or cause Network Monitor to stop responding (hang).
RESOLUTIONWindows 2000To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:260910 (http://support.microsoft.com/kb/260910/EN-US/) How to Obtain the Latest Windows 2000 Service Pack
The following files are available for download from the Microsoft
Download Center: English Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/en-us/q274835_w2k_sp2_x86_en.exe) Chinese (Simplified) Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/cn/q274835_w2k_sp2_x86_cn.exe) Chinese (Traditional) Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/tw/q274835_w2k_sp2_x86_tw.exe) Czech Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/cs/q274835_w2k_sp2_x86_cs.exe) Dutch Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/nl/q274835_w2k_sp2_x86_nl.exe) French Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/fr/q274835_w2k_sp2_x86_fr.exe) Dutch Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/de/q274835_w2k_sp2_x86_de.exe) Hungarian Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/hu/q274835_w2k_sp2_x86_hu.exe) Italian Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/it/q274835_w2k_sp2_x86_it.exe) Japanese Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/ja/q274835_w2k_sp2_x86_ja.exe) Japanese NEC Language Version (http://download.microsoft.com/download/win2000platform/patchnec/q274835/nt5/ja/q274835_w2k_sp2_nec98_ja.exe) Korean Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/ko/q274835_w2k_sp2_x86_ko.exe) Polish Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/pl/q274835_w2k_sp2_x86_pl.exe) Portuguese (Brazilian) Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/pt-br/q274835_w2k_sp2_x86_br.exe) Portuguese Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/pt/q274835_w2k_sp2_x86_pt.exe) Russian Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/ru/q274835_w2k_sp2_x86_ru.exe) Spanish Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/es/q274835_w2k_sp2_x86_es.exe) Swedish Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/sv/q274835_w2k_sp2_x86_sv.exe) Turkish Language Version (http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/tr/q274835_w2k_sp2_x86_tr.exe)119591 (http://support.microsoft.com/kb/119591/EN-US/) How to Obtain Microsoft Support Files from Online Services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.
The English-language version of this fix should have the following file attributes or later:
Date Time Version Size File name ------------------------------------------------------ 09/26/2000 03:41p 5.0.2195.2328 93,456 Bhp001.dll 09/26/2000 03:41p 5.0.2195.2328 7,440 Bhp002.dll 09/26/2000 03:41p 5.0.2195.2328 13,072 Bhp003.dll 09/26/2000 03:41p 5.0.2195.2328 6,928 Bhp004.dll 09/26/2000 03:41p 5.0.2195.2328 30,992 Bhp005.dll 09/26/2000 03:41p 5.0.2195.2328 19,728 Bhp006.dll 09/26/2000 03:41p 5.0.2195.2328 64,784 Bhp007.dll 09/26/2000 03:41p 5.0.2195.2328 27,408 Bhp008.dll 09/26/2000 03:41p 5.0.2195.2328 125,712 Bhp009.dll 09/26/2000 03:41p 5.0.2195.2328 15,120 Bhp010.dll 09/26/2000 03:41p 5.0.2195.2328 13,072 Bhp011.dll 09/26/2000 03:41p 5.0.2195.2328 49,424 Bhp012.dll 09/26/2000 03:41p 5.0.2195.2328 133,904 Bhp013.dll 09/26/2000 03:41p 5.0.2195.2328 12,048 Bhp014.dll 09/26/2000 03:41p 5.0.2195.2328 179,984 Bhp015.dll 09/26/2000 03:41p 5.0.2195.2328 16,144 Bhp016.dll 09/26/2000 03:32p 352 Bhp016.ini 09/26/2000 03:41p 5.0.2195.2328 21,264 Bhp017.dll 09/26/2000 03:41p 5.0.2195.2328 12,048 Bhp018.dll 09/26/2000 03:41p 5.0.2195.2328 135,440 Bhp019.dll 09/26/2000 03:41p 5.0.2195.2328 95,504 Bhp020.dll 09/26/2000 03:41p 5.0.2195.2328 119,568 Bhp021.dll 09/26/2000 03:41p 5.0.2195.2328 19,728 Bhp022.dll 09/26/2000 03:41p 5.0.2195.2328 10,512 Bhp023.dll 09/26/2000 03:41p 5.0.2195.2328 15,120 Bhp024.dll 09/26/2000 03:41p 5.0.2195.2328 16,144 Bhp025.dll 09/26/2000 03:41p 5.0.2195.2328 785,680 Netmon.exe 09/26/2000 03:40p 5.0.2195.2328 64,784 Nmapi.dll Windows NT 4.0To resolve this problem, obtain the individual package referenced below or obtain the Windows NT 4.0 Security Rollup Package. For additional information on the SRP, click the article number below to view the article in the Microsoft Knowledge Base:299444 (http://support.microsoft.com/kb/299444/EN-US/) Post-Windows NT 4.0 Service Pack 6a Security Rollup Package (SRP)
The following file is available for download from the Microsoft Download Center:Download Q274835i.exe now (http://www.microsoft.com/Downloads/details.aspx?displaylang=en&FamilyID=8962F95A-409B-4888-BD00-FED6D2282999)119591 (http://support.microsoft.com/kb/119591/EN-US/) How to Obtain Microsoft Support Files from Online Services Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on secure servers that prevent any unauthorized changes to the file.The English-language version of this fix should have the following file attributes or later: Date Time Version Size File name --------------------------------------------------- 10/30/2000 01:45p 4.0.354.1 130,832 Atalk.dll 10/30/2000 01:45p 4.0.354.1 10,000 Bone.dll 10/30/2000 01:45p 4.0.354.1 18,192 Browser.dll 10/30/2000 01:45p 4.0.354.1 42,768 Ipx.dll 10/30/2000 01:45p 4.0.354.1 203,536 Ncp.dll 10/30/2000 01:45p 4.0.354.1 21,280 Netbios.dll 10/30/2000 01:45p 4.0.354.1 63,968 Nmapi.dll 10/30/2000 01:45p 4.0.354.1 63,760 Ppp.dll 10/30/2000 01:45p 4.0.354.1 168,208 Smb.dll 10/30/2000 01:45p 4.0.354.1 16,656 Snmp.dll 10/30/2000 01:45p 4.0.354.1 186,128 Tcpip.dll 10/30/2000 01:45p 4.0.354.1 21,264 Trail.dll 10/30/2000 01:45p 4.0.354.1 26,896 Vines.dll Microsoft Windows NT Server version 4.0, Terminal Server EditionTo resolve this problem, obtain the Windows NT Server 4.0, Terminal Server Edition, Security Rollup Package (SRP). For additional information about the SRP, click the article number below to view the article in the Microsoft Knowledge Base:317636 (http://support.microsoft.com/kb/317636/EN-US/) Windows NT Server 4.0, Terminal
Server Edition, Security Rollup Package
STATUSWindows 2000Microsoft has confirmed that this problem may cause a degree of security vulnerability in Microsoft Windows 2000.Windows NT 4.0Microsoft has confirmed that this problem may cause a degree of security vulnerability in Microsoft Windows NT 4.0 and Windows NT Server version 4.0, Terminal Server Edition.MORE INFORMATION
For more information about this vulnerability, view the following Microsoft Web site:
http://www.microsoft.com/technet/security/bulletin/ms00-083.mspx (http://www.microsoft.com/technet/security/bulletin/ms00-083.mspx) APPLIES TO
| Article Translations
|
| United States | Change | | | All Microsoft Sites |
Help and Support
Back to the top
|
