Oval Definition:	oval:org.mitre.oval:def:3
Revision Date: 2011-05-09 Version: 23 Title: SMB Information Disclosure Vulnerability Description: The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to obtain sensitive information via crafted requests that leak information in SMB buffers, which are not properly initialized, aka "SMB Information Disclosure Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2006-1315 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows XP Product(s): Definition Synopsis Win2K,SP4 Microsoft Windows 2000 SP4 or later is installed AND the version of srv.sys is less than 5.0.2195.7087 OR WinXP,SP1 Microsoft Windows XP SP1 (32-bit) is installed AND the version of srv.sys is less than 5.1.2600.1832 OR WinXP,SP2 Microsoft Windows XP SP2 or later is installed AND the version of srv.sys is less than 5.1.2600.2893 OR WinXP,SP1 (64-bit) Microsoft Windows XP SP1 (64-bit) is installed AND the version of srv.sys is less than 5.2.3790.2691 OR S03-Gold Microsoft Windows Server 2003 (x86) Gold is installed AND the version of srv.sys is less than 5.2.3790.526 OR S03,SP1 Microsoft Windows Server 2003 SP1 (x86) is installed AND the version of srv.sys is less than 5.2.3790.2691
BACK