- Quick specs
- Price: Free
- Operating system:
- Date added: November 10, 2000
- Total Downloads: 3,567
- Downloads last week: 1
- See full specifications
- Average user rating: stars out of 1 votes
See all user reviews
Publisher's description
From Microsoft :This patch eliminates a security vulnerability in Microsoft Windows 2000 server products and Systems Management Server. The vulnerability could allow a malicious user to gain control of an affected server.
Microsoft ships two versions of Network Monitor (Netmon): a basic version that ships with Windows NT 4.0 and Windows 2000 server products, and a full version that ships as part of Systems Management Server (SMS) 1.2 and 2.0. Both versions include protocol parsers that aid administrators in interpreting and analyzing previously captured network data. However, several of the parsers have unchecked buffers. If a malicious user delivered a specially malformed frame to a server that was monitoring network traffic, and the administrator parsed it using an affected parser, it would have the effect of either causing Netmon to fail or causing code of the malicious user's choice to run on the machine.
Netmon requires administrative privileges to run, but should only be run by local, rather than domain, administrators. If this is done, the vulnerability could be used to gain complete control over the local machine, but could not be used to gain control over a domain. Netmon does not ship on workstation products, so unless SMS had been installed on a workstation, it would not be affected by this vulnerability.
Read the Netmon Protocol Parsing Vulnerability FAQ.
CNET Editor's Note: Netmon does not ship as part of Windows NT 4.0 Workstation or Windows 2000 Professional. These products would only be affected if SMS had been installed on them.
More popular Corporate Security Software downloads
- 2,215 downloads 1. Folder Guard
- 1,078 downloads 2. L0phtCrack
- 695 downloads 3. McAfee Total Protection for Small Business
- 651 downloads 4. Spyware Doctor Enterprise Free Edition
- 646 downloads 5. Wireshark
- See all Corporate Security Software downloads
User reviews
Write your own review Be the first one to review Microsoft Netmon Protocol Parsing Vulnerability Patch (Windows 2000) (MS00-083) and share your experience with the CNET community!
Previous versions: See all user reviews
Submit your review
- See more CNET content tagged:
- Microsoft Systems Management Server,
- Microsoft Windows 2000 Server,
- administrator,
- malicious user,
- vulnerability

