MS05-051 Scan Detection and analysis utility
Download

MS05-051 Scan Ranking & Summary

MS05-051 Scan Tags

detect detection analysis utility vulnerability vulnerability scanner Syyware Detection Vulnerability Detection sibilant detection transient detection characterset detection truncation detection Pathogenic detection onset detection Anomaly Detection Vulnerability Analysis softice detection remotely detection driver detection user detection invariant detection intruder detection

MS05-051 Scan Description

The MS05-051 Scan application was designed to be a Windows based detection and analysis utility that can quickly and accurately identify Microsoft operating systems that are vulnerable to the vulnerabilities released in the MS05-051 bulletin. MS05-051 Scan is intended for use by enterprise system and network administrators as a fast and reliable utility for identifying at risk Microsoft systems in a passive manner. This tool is non-abrasive in nature and may be run in production environments during production hours. Vulnerability Information: A remote code execution and local elevation of privilege vulnerability exists in the Microsoft Distributed Transaction Coordinator that could allow an attacker who successfully exploited this vulnerability to take complete control of the affected system. Using a null session, an attacker could make an RPC request to the DTC interface on a Microsoft Windows system and potentially execute arbitrary code. This Foundstone check detects the absence of the patch by attempting to trigger the vulnerability in a nonintrusive manner over RPC.

MS05-051 Scan Related Software