Microsoft Windows Server Service RPC Vulnerability

URL : http://www.us-cert.gov/cas/techalerts/TA08-297A.html

Original release date: October 23, 2008
Last revised: October 29, 2009
Source: US-CERT

Systems Affected

• Microsoft Windows 2000
• Microsoft Windows XP
• Microsoft Windows Server 2003
• Microsoft Windows Vista
• Microsoft Windows Server 2008

Overview

A vulnerability in the way the Microsoft Windows server service handles RPC requests could allow an unauthenticated, remote attacker to execute arbitrary code with SYSTEM privileges.