The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication requests, which allows remote attackers to execute arbitrary code via crafted structures in a malformed request, aka "Internet Authentication Service Memory Corruption Vulnerability."

According to the version number obtained by NTLM the remote host has Windows Server 2008 installed. The host may be vulnerable to a number of vulnerabilities including remote unauthenticated code execution.

The remote Windows host has the following vulnerabilities in the Internet Authentication Service :

  - There is a memory corruption vulnerability in the PEAP     authentication implementation.  A remote, unauthenticated     attacker could exploit this to execute arbitrary code as     SYSTEM.  (CVE-2009-2505)

  - Sending a specially crafted MS-CHAP v2 authentication     request could allow a remote attacker to obtain the     privileges of a specific, authorized user. (CVE-2009-3677)

ID	Name	Product	Family	Severity
108811	Windows Server 2008 Critical RCE Vulnerabilities (uncredentialed) (PCI/DSS)	Nessus	Windows	critical
43063	MS09-071: Vulnerabilities in Internet Authentication Service Could Allow Remote Code Execution (974318)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2009-2505

critical

Tenable Plugins

critical

critical