Description
Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.
References
- oval:org.mitre.oval:def:63 vdb-entry signature
- 20020613 Microsoft RASAPI32.DLL mailing-list
- oval:org.mitre.oval:def:61 vdb-entry signature
- 20020620 VPN and Q318138 mailing-list
- http://www.nextgenss.com/vna/ms-ras.txt
- 4852 vdb-entry
- MS02-029 vendor-advisory