10 - MS05-039

Executive Summary

Informations
Name	MS05-039	First vendor Publication	N/A
Vendor	Microsoft	Last vendor Modification	N/A
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege (899588)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:100073

Oval ID:	oval:org.mitre.oval:def:100073
Title:	Windows XP (64-bit) PnP Buffer Overflow
Description:	Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2005-1983	Version:	3
Platform(s):	Microsoft Windows XP	Product(s):
Definition Synopsis:
Windows XP is installed AND a version of Windows for the ia64 architecture is installed AND the version of umpnpmgr.dll is less than 5.2.3790.2477

Definition Id: oval:org.mitre.oval:def:160

Oval ID:	oval:org.mitre.oval:def:160
Title:	Windows Server 2003 Plug and Play Buffer Overflow Vulnerability
Description:	Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2005-1983	Version:	5
Platform(s):	Microsoft Windows Server 2003	Product(s):
Definition Synopsis:
Windows Server 2003 is installed AND Win2K/XP/2003 service pack 1 is installed AND the version of umpnpmgr.dll is less than 5.2.3790.2477

Definition Id: oval:org.mitre.oval:def:267

Oval ID:	oval:org.mitre.oval:def:267
Title:	Windows XP Plug and Play Buffer Overflow Vulnerability
Description:	Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2005-1983	Version:	5
Platform(s):	Microsoft Windows XP	Product(s):
Definition Synopsis:
Windows XP is installed AND Win2K/XP/2003 service pack 1 is installed AND NOT 64-Bit (ia64 architecture) version of Windows is installed AND the version of umpnpmgr.dll is less than 5.1.2600.1711

Definition Id: oval:org.mitre.oval:def:474

Oval ID:	oval:org.mitre.oval:def:474
Title:	Windows 2000 Plug and Play Buffer Overflow Vulnerability
Description:	Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2005-1983	Version:	3
Platform(s):	Microsoft Windows 2000	Product(s):
Definition Synopsis:
Windows 2000 is installed AND the version of umpnpmgr.dll is less than 5.0.2195.7057

Definition Id: oval:org.mitre.oval:def:497

Oval ID:	oval:org.mitre.oval:def:497
Title:	Windows XP,SP2 Plug and Play Buffer Overflow Vulnerability
Description:	Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2005-1983	Version:	7
Platform(s):	Microsoft Windows XP	Product(s):
Definition Synopsis:
Windows XP is installed AND Win2K/XP/2003/Vista/2008 service pack 2 is installed AND NOT 64-Bit (ia64 architecture) version of Windows is installed AND the version of umpnpmgr.dll is less than 5.1.2600.2710

Definition Id: oval:org.mitre.oval:def:783

Oval ID:	oval:org.mitre.oval:def:783
Title:	Windows Server 2003 Plug and Play Buffer Overflow Vulnerability
Description:	Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2005-1983	Version:	6
Platform(s):	Microsoft Windows Server 2003	Product(s):
Definition Synopsis:
Windows Server 2003 is installed AND NOT Win2K/XP/2003 is patched AND the version of umpnpmgr.dll is less than 5.2.3790.360

CPE : Common Platform Enumeration

Type	Description	Count
Os	Microsoft Windows 2000 cpe:2.3:o:microsoft:windows_2000::::::::	1
Os	Microsoft Windows Xp cpe:2.3:o:microsoft:windows_xp::sp1:tablet_pc:::::	1

SAINT Exploits

Description	Link
Windows Plug and Play buffer overflow	More info here

ExploitDB Exploits

id	Description
2010-08-30	Microsoft Plug and Play Service Overflow
2005-08-25	MS Windows Plug-and-Play Service Remote Universal Exploit (french fix)
2005-08-25	MS Windows Plug-and-Play Service Remote Universal Exploit (spanish fix)
2005-08-12	MS Windows Plug-and-Play Service Remote Universal Exploit (MS05-039)
2005-08-11	MS Windows Plug-and-Play Service Remote Overflow (MS05-039)

Open Source Vulnerability Database (OSVDB)

Id	Description
18605	Microsoft Windows Plug-and-Play Service Remote Overflow A remote overflow exists in Windows. The Plug and Play Service fails to validate the length of a message resulting in a buffer overflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Snort® IPS/IDS

Date	Description
2014-01-10	zotob attempt RuleID : 9421 - Revision : 12 - Type : MALWARE-OTHER
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict unicode little endian andx attempt RuleID : 4125 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict unicode little endian attempt RuleID : 4124 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict unicode little endian andx attempt RuleID : 4123 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict unicode attempt RuleID : 4122 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict unicode andx attempt RuleID : 4121 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict little endian attempt RuleID : 4120 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict little endian andx attempt RuleID : 4119 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict attempt RuleID : 4118 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict andx attempt RuleID : 4117 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict WriteAndX unicode little endian... RuleID : 4116 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict WriteAndX unicode little endian... RuleID : 4115 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict WriteAndX unicode attempt RuleID : 4114 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict WriteAndX unicode andx attempt RuleID : 4113 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict WriteAndX little endian attempt RuleID : 4112 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict WriteAndX little endian andx at... RuleID : 4111 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict WriteAndX attempt RuleID : 4110 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_DetectResourceConflict WriteAndX andx attempt RuleID : 4109 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict unicode little endian attempt RuleID : 4108 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict unicode little endian andx attempt RuleID : 4107 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict unicode attempt RuleID : 4106 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict unicode andx attempt RuleID : 4105 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict little endian attempt RuleID : 4104 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict little endian andx attempt RuleID : 4103 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict attempt RuleID : 4102 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict andx attempt RuleID : 4101 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict WriteAndX unicode little endian at... RuleID : 4100 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict WriteAndX unicode little endian an... RuleID : 4099 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict WriteAndX unicode attempt RuleID : 4098 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict WriteAndX unicode andx attempt RuleID : 4097 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict WriteAndX little endian attempt RuleID : 4096 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict WriteAndX little endian andx attempt RuleID : 4095 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict WriteAndX attempt RuleID : 4094 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_DetectResourceConflict WriteAndX andx attempt RuleID : 4093 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict unicode little endian attempt RuleID : 4092 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict unicode little endian andx attempt RuleID : 4091 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict unicode attempt RuleID : 4090 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict unicode andx attempt RuleID : 4089 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict little endian attempt RuleID : 4088 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict little endian andx attempt RuleID : 4087 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict attempt RuleID : 4086 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict andx attempt RuleID : 4085 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict WriteAndX unicode little endian at... RuleID : 4084 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict WriteAndX unicode little endian an... RuleID : 4083 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict WriteAndX unicode attempt RuleID : 4082 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict WriteAndX unicode andx attempt RuleID : 4081 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict WriteAndX little endian attempt RuleID : 4080 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict WriteAndX little endian andx attempt RuleID : 4079 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict WriteAndX attempt RuleID : 4078 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_DetectResourceConflict WriteAndX andx attempt RuleID : 4077 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_DetectResourceConflict unicode little endian attempt RuleID : 4076 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_DetectResourceConflict unicode little endian andx attempt RuleID : 4075 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_DetectResourceConflict unicode attempt RuleID : 4074 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_DetectResourceConflict unicode andx attempt RuleID : 4073 - Revision : 7 - Type : NETBIOS
2014-01-10	DCERPC NCACN-IP-TCP umpnpmgr PNP_DetectResourceConflict attempt RuleID : 4072 - Revision : 13 - Type : OS-WINDOWS
2014-01-10	SMB umpnpmgr PNP_DetectResourceConflict little endian andx attempt RuleID : 4071 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_DetectResourceConflict attempt RuleID : 4070 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_DetectResourceConflict andx attempt RuleID : 4069 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_DetectResourceConflict WriteAndX unicode little endian attempt RuleID : 4068 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_DetectResourceConflict WriteAndX unicode little endian andx ... RuleID : 4067 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_DetectResourceConflict WriteAndX unicode attempt RuleID : 4066 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_DetectResourceConflict WriteAndX unicode andx attempt RuleID : 4065 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_DetectResourceConflict WriteAndX little endian attempt RuleID : 4064 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_DetectResourceConflict WriteAndX little endian andx attempt RuleID : 4063 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_DetectResourceConflict WriteAndX attempt RuleID : 4062 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_DetectResourceConflict WriteAndX andx attempt RuleID : 4061 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList unicode little endian attempt RuleID : 4059 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList unicode little endian andx attempt RuleID : 4058 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList unicode attempt RuleID : 4057 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList unicode andx attempt RuleID : 4056 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 4055 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList little endian andx attempt RuleID : 4054 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList attempt RuleID : 4053 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList andx attempt RuleID : 4052 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian attempt RuleID : 4051 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian andx att... RuleID : 4050 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode attempt RuleID : 4049 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode andx attempt RuleID : 4048 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX little endian attempt RuleID : 4047 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX little endian andx attempt RuleID : 4046 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX attempt RuleID : 4045 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX andx attempt RuleID : 4044 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList unicode little endian attempt RuleID : 4043 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList unicode little endian andx attempt RuleID : 4042 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList unicode attempt RuleID : 4041 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList unicode andx attempt RuleID : 4040 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 4039 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList little endian andx attempt RuleID : 4038 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList attempt RuleID : 4037 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList andx attempt RuleID : 4036 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian attempt RuleID : 4035 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian andx attempt RuleID : 4034 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX unicode attempt RuleID : 4033 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX unicode andx attempt RuleID : 4032 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX little endian attempt RuleID : 4031 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX little endian andx attempt RuleID : 4030 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX attempt RuleID : 4029 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX andx attempt RuleID : 4028 - Revision : 5 - Type : NETBIOS-DG
2014-01-10	DCERPC NCADG-IP-UDP v4 umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 4027 - Revision : 5 - Type : NETBIOS
2014-01-10	DCERPC NCADG-IP-UDP v4 umpnpmgr PNP_QueryResConfList attempt RuleID : 4026 - Revision : 5 - Type : NETBIOS
2014-01-10	DCERPC NCADG-IP-UDP umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 4025 - Revision : 5 - Type : NETBIOS
2014-01-10	DCERPC NCADG-IP-UDP umpnpmgr PNP_QueryResConfList attempt RuleID : 4024 - Revision : 5 - Type : NETBIOS
2014-01-10	DCERPC DIRECT-UDP v4 umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 4023 - Revision : 5 - Type : NETBIOS
2014-01-10	DCERPC DIRECT-UDP v4 umpnpmgr PNP_QueryResConfList attempt RuleID : 4022 - Revision : 5 - Type : NETBIOS
2014-01-10	DCERPC DIRECT-UDP umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 4021 - Revision : 5 - Type : NETBIOS
2014-01-10	DCERPC DIRECT-UDP umpnpmgr PNP_QueryResConfList attempt RuleID : 4020 - Revision : 5 - Type : NETBIOS
2014-01-10	DCERPC NCACN-HTTP v4 umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 4019 - Revision : 4 - Type : NETBIOS
2014-01-10	DCERPC NCACN-HTTP v4 umpnpmgr PNP_QueryResConfList attempt RuleID : 4018 - Revision : 4 - Type : NETBIOS
2014-01-10	DCERPC NCACN-HTTP umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 4017 - Revision : 4 - Type : NETBIOS
2014-01-10	DCERPC NCACN-HTTP umpnpmgr PNP_QueryResConfList attempt RuleID : 4016 - Revision : 4 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian attempt RuleID : 4015 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian andx att... RuleID : 4014 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode attempt RuleID : 4013 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode andx attempt RuleID : 4012 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 4011 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList little endian andx attempt RuleID : 4010 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList attempt RuleID : 4009 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList andx attempt RuleID : 4008 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian attempt RuleID : 4007 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian andx ... RuleID : 4006 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode attempt RuleID : 4005 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode andx attempt RuleID : 4004 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList unicode little endian attempt RuleID : 4003 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList unicode little endian andx attempt RuleID : 4002 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList unicode attempt RuleID : 4001 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList unicode andx attempt RuleID : 4000 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList unicode little endian attempt RuleID : 3999 - Revision : 8 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian andx attempt RuleID : 3998 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX unicode attempt RuleID : 3997 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX unicode andx attempt RuleID : 3996 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 3995 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList little endian andx attempt RuleID : 3994 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList attempt RuleID : 3993 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList andx attempt RuleID : 3992 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian attempt RuleID : 3991 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian andx att... RuleID : 3990 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList WriteAndX unicode attempt RuleID : 3989 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList WriteAndX unicode andx attempt RuleID : 3988 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList WriteAndX little endian attempt RuleID : 3987 - Revision : 8 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList unicode little endian andx attempt RuleID : 3986 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList unicode attempt RuleID : 3985 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList unicode andx attempt RuleID : 3984 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList unicode little endian attempt RuleID : 3983 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList unicode little endian andx attempt RuleID : 3982 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList unicode attempt RuleID : 3981 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList unicode andx attempt RuleID : 3980 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList WriteAndX little endian attempt RuleID : 3979 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList WriteAndX little endian andx attempt RuleID : 3978 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList WriteAndX attempt RuleID : 3977 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB-DS v4 umpnpmgr PNP_QueryResConfList WriteAndX andx attempt RuleID : 3976 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX little endian attempt RuleID : 3975 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX little endian andx attempt RuleID : 3974 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX attempt RuleID : 3973 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX andx attempt RuleID : 3972 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 3971 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList little endian andx attempt RuleID : 3970 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList attempt RuleID : 3969 - Revision : 5 - Type : NETBIOS
2014-01-10	SMB v4 umpnpmgr PNP_QueryResConfList andx attempt RuleID : 3968 - Revision : 5 - Type : NETBIOS
2014-01-10	DCERPC NCACN-IP-TCP umpnpmgr PNP_QueryResConfList attempt RuleID : 3967 - Revision : 15 - Type : OS-WINDOWS
2014-01-10	SMB umpnpmgr PNP_QueryResConfList unicode little endian andx attempt RuleID : 3966 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_QueryResConfList unicode attempt RuleID : 3965 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_QueryResConfList unicode andx attempt RuleID : 3964 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 3963 - Revision : 8 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList WriteAndX little endian andx attempt RuleID : 3962 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList WriteAndX attempt RuleID : 3961 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB-DS umpnpmgr PNP_QueryResConfList WriteAndX andx attempt RuleID : 3960 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX little endian attempt RuleID : 3959 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX little endian andx attempt RuleID : 3958 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX attempt RuleID : 3957 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX andx attempt RuleID : 3956 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian attempt RuleID : 3955 - Revision : 8 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_QueryResConfList little endian andx attempt RuleID : 3954 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_QueryResConfList attempt RuleID : 3953 - Revision : 7 - Type : NETBIOS
2014-01-10	SMB umpnpmgr PNP_QueryResConfList andx attempt RuleID : 3952 - Revision : 7 - Type : NETBIOS
2014-01-10	DCERPC NCACN-IP-TCP v4 umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 3951 - Revision : 4 - Type : NETBIOS
2014-01-10	DCERPC NCACN-IP-TCP v4 umpnpmgr PNP_QueryResConfList attempt RuleID : 3950 - Revision : 4 - Type : NETBIOS
2014-01-10	DCERPC NCACN-IP-TCP umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 3949 - Revision : 4 - Type : NETBIOS
2014-01-10	DCERPC NCACN-IP-TCP umpnpmgr PNP_QueryResConfList attempt RuleID : 3948 - Revision : 4 - Type : NETBIOS
2014-01-10	DCERPC DIRECT v4 umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 3947 - Revision : 4 - Type : NETBIOS
2014-01-10	DCERPC DIRECT v4 umpnpmgr PNP_QueryResConfList attempt RuleID : 3946 - Revision : 4 - Type : NETBIOS
2014-01-10	DCERPC DIRECT umpnpmgr PNP_QueryResConfList little endian attempt RuleID : 3945 - Revision : 4 - Type : NETBIOS
2014-01-10	DCERPC DIRECT umpnpmgr PNP_QueryResConfList attempt RuleID : 3944 - Revision : 4 - Type : NETBIOS

Metasploit Database

id	Description
2005-08-09	MS05-039 Microsoft Plug and Play Service Overflow

Nessus® Vulnerability Scanner

Date	Description
2007-03-12	Name : A flaw in the Plug and Play service may allow an authenticated attacker to ex... File : smb_kb905749.nasl - Type : ACT_GATHER_INFO
2005-08-09	Name : Arbitrary code can be executed on the remote host due to a flaw in the Plug-A... File : smb_kb899588.nasl - Type : ACT_GATHER_INFO
2005-08-09	Name : Arbitrary code can be executed on the remote host due to a flaw in the Plug-A... File : smb_nt_ms05-039.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2020-05-23 13:17:12	Multiple Updates
2014-02-17 11:45:14	Multiple Updates
2014-01-19 21:29:55	Multiple Updates

Global Informations

Type	Count
Oval ID(s)	6
CPE ID(s)	2
Saint Exploit(s)	1
osvdb(s)	1
ExploitDB Exploit(s)	5
Metasploit Exploit(s)	1
Snort® Rule(s)	182
Nessus® Exploit(s)	3

	Related
10	CVE-2005-1983
10	KB899588
0	KB906574
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 3 more Alert(s)

10 - MS05-039

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

OVAL Definitions

CPE : Common Platform Enumeration

SAINT Exploits

ExploitDB Exploits

Open Source Vulnerability Database (OSVDB)

Snort® IPS/IDS

Metasploit Database

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU