Test ID:	1.3.6.1.4.1.25623.1.0.11890
Category:	Windows
Title:	Buffer Overrun in Messenger Service (real test)
Summary:	NOSUMMARY
Description:	Description: A security vulnerability exists in the Messenger Service that could allow arbitrary code execution on an affected system. An attacker who successfully exploited this vulnerability could be able to run code with Local System privileges on an affected system, or could cause the Messenger Service to fail. Disabling the Messenger Service will prevent the possibility of attack. This plugin actually checked for the presence of this flaw. Solution : see http://www.microsoft.com/technet/security/bulletin/ms03-043.mspx Risk factor : High
Cross-Ref:	BugTraq ID: 8826 Common Vulnerability Exposure (CVE) ID: CVE-2003-0717 http://www.securityfocus.com/bid/8826 Bugtraq: 20031016 MS03-043 Popup Messenger Servce buffer-overflow (Google Search) http://marc.info/?l=ntbugtraq&m=106632188709562&w=2 Bugtraq: 20031018 Proof of concept for Windows Messenger Service overflow (Google Search) http://marc.info/?l=bugtraq&m=106666713812158&w=2 http://www.cert.org/advisories/CA-2003-27.html CERT/CC vulnerability note: VU#575892 http://www.kb.cert.org/vuls/id/575892 Microsoft Security Bulletin: MS03-043 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-043 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A213 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A268
Copyright	This script is Copyright (C) 2003 Tenable Network Security

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.