=====================================================================
                                   CERT-Renater

                        Note d'Information No. 2009/VULN232
_____________________________________________________________________

DATE                      : 10/06/2009

HARDWARE PLATFORM(S)      : /

OPERATING SYSTEM(S)       : Windows 2000, Windows XP, Windows Server 2003,
                             Windows Vista, Windows Server 2008
                              running Windows RPC.

======================================================================
KB970238
http://www.microsoft.com/technet/security/Bulletin/MS09-026.mspx
______________________________________________________________________

Microsoft Security Bulletin MS09-026 - Important

Vulnerability in RPC Could Allow Elevation of Privilege (970238)

   Published: June 9, 2009

   Version: 1.0

General Information

Executive Summary

   This security update resolves a publicly disclosed vulnerability in the
   Windows remote procedure call (RPC) facility where the RPC Marshalling
   Engine does not update its internal state appropriately. The
   vulnerability could allow an attacker to execute arbitrary code and take
   complete control of an affected system. Supported editions of Microsoft
   Windows are not delivered with any RPC servers or clients that are
   subject to exploitation of this vulnerability. In a default
   configuration, users could not be attacked by exploitation of this
   vulnerability. However, the vulnerability is present in the Microsoft
   Windows RPC runtime and could affect third-party RPC applications.

   This security update is rated Important for all supported editions of
   Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista,
   and Windows Server 2008. For more information, see the subsection,
   Affected and Non-Affected Software, in this section.

   The update addresses the vulnerability by correcting the way that the
   RPC Marshalling Engine updates its internal state.

Affected Software

   Microsoft Windows 2000 Service Pack 4
   Windows XP Service Pack 2 and
   Windows XP Service Pack 3
   Windows XP Professional x64 Edition Service Pack 2
   Windows Server 2003 Service Pack 2
   Windows Server 2003 x64 Edition Service Pack 2
   Windows Server 2003 with SP2 for Itanium-based Systems
   Windows Vista,
   Windows Vista Service Pack 1, and
   Windows Vista Service Pack 2
   Windows Vista x64 Edition,
   Windows Vista x64 Edition Service Pack 1, and
   Windows Vista x64 Edition Service Pack 2
   Windows Server 2008 for 32-bit Systems and
   Windows Server 2008 for 32-bit Systems Service Pack 2
   (Windows Server 2008 Server Core installation affected)
   Windows Server 2008 for x64-based Systems and
   Windows Server 2008 for x64-based Systems Service Pack 2
   (Windows Server 2008 Server Core installation affected)
   Windows Server 2008 for Itanium-based Systems and
   Windows Server 2008 for Itanium-based Systems Service Pack 2

Vulnerability Information

   RPC Marshalling Engine Vulnerability - CVE-2009-0568

   An elevation of privilege vulnerability exists in the Windows remote
   procedure call (RPC) facility where the RPM Marshalling Engine does not
   update its internal state appropriately. The failure to update internal
   state could lead to a pointer being read from an incorrect location. An
   attacker who successfully exploited this vulnerability could execute
   arbitrary code and take complete control of an affected system. An
   attacker could then install programs; view, change, or delete data; or
   create new accounts with full user rights.


======================================================================

          =========================================================
          Les serveurs de référence du CERT-Renater
          http://www.urec.fr/securite
          http://www.cru.fr/securite
          http://www.renater.fr
          =========================================================
          + CERT-RENATER          | tel : 01-53-94-20-44          +
          + 151 bd de l'Hopital   | fax : 01-53-94-20-41          +
          + 75013 Paris           | email: certsvp@renater.fr     +
          =========================================================