## WindowsNT CD .. Vulnerability

### Risk Factor: 7

### Machines Affected:

Unpatched versions of WindowsNT

### Description:

Machines able to access WindowsNT can posibly crash, or bring down the machine.

### Consequences:

After a "DIR ..\" command is sent to a Windows NT version 3.5 or 3.51 computer from a Samba (public domain SMB) client, a STOP Message (blue screen) appears on the Windows NT computer with various error codes, including:

     STOP Message 0x0000001E

       -or-

       STOP Message 0x0000001A

       -or-

       STOP Message 0x00000019

This problem is caused by heap corruption in SRV.SYS

### Fix:

Download servicepack 4 from Microsoft

For more info, see Microsofts Knowledge Base