Executive Summary

Informations
Name	MS05-007	First vendor Publication	0000-00-00
Vendor	Microsoft	Last vendor Modification	0000-00-00
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Vulnerability in Windows Could Allow Information Disclosure (888302)

Original Source

Url : http://technet.microsoft.com/en-us/security/bulletin/MS05-007

OVAL Definitions

 

Definition Id: oval:org.mitre.oval:def:3055
Oval ID:	oval:org.mitre.oval:def:3055
Title:	Windows XP Named Pipe Vulnerability (64-bit architecture)
Description:	The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing resources) via an anonymous logon using a named pipe, which is not properly authenticated, aka the "Named Pipe Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2005-0051	Version:	4
Platform(s):	Microsoft Windows XP	Product(s):
Definition Synopsis:
Windows XP SP1 OR Windows XP 64-bit SP1 is installed Windows XP 32-bit SP1 is installed Windows XP 32-bit edition is installed Windows XP is installed AND 32-Bit version of Windows is installed AND Win2K/XP/2003 service pack 1 is installed OR Windows XP 64-bit with Service Pack 1 Windows XP is installed AND 64-Bit version of Windows is installed AND Win2K/XP/2003 service pack 1 is installed AND the version of srvsvc.dll is less than 5.1.2600.1613 AND NOT the patch kb888302 is installed (Hotfix key)

 

Definition Id: oval:org.mitre.oval:def:2292
Oval ID:	oval:org.mitre.oval:def:2292
Title:	Windows XP Named Pipe Vulnerability (32-bit architecture)
Description:	The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing resources) via an anonymous logon using a named pipe, which is not properly authenticated, aka the "Named Pipe Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2005-0051	Version:	6
Platform(s):	Microsoft Windows XP	Product(s):
Definition Synopsis:
Windows XP 32 bit Service Pack 2 Win2K/XP/2003/Vista/2008 Service Pack 2 is installed AND Windows XP 32-bit edition is installed Windows XP is installed AND 32-Bit version of Windows is installed AND the version of srvsvc.dll is less than 5.1.2600.2577 AND NOT the patch kb888302 is installed (Hotfix key)

CPE : Common Platform Enumeration

Type	Description	Count
Os	Microsoft Windows Xp cpe:/o:microsoft:windows_xp::sp1:tablet_pc cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp2:tablet_pc	3

Open Source Vulnerability Database (OSVDB)

id	Description
13596	Microsoft Windows XP Named Pipe Username Disclosure