PRIMERGY LAN Driver Buffer Overflow Local Privilege Escalation April 19th, 2007
1. Background and Detected problem(s)
A software vulnerability exists in the specified network component drivers that could allow unprivileged code executing on an affected system to perform a local privilege escalation.
This problem corresponds to the following Intel Alert.
Intel(R) LAN Driver Buffer Overflow Local Privilege Escalation.
http://support.intel.com/support/network/sb/CS-023726.htm
Fujitsu provides security patches shown in 3.
Please apply them as soon as possible.
2. Method to temporarily avoid the problem
None.
3. Corresponding system and Patch information
a. Corresponding system : PRIMERGY
LAN models | Driver Versions |
---|---|
Onboard LAN
TX150 S2, RX100 S2, RX200 S2, BX620S2 | 6.2.21.0 - 8.7.1.0 |
LAN cards
PG-1852/ 1862/ 1882/ 1882L/ 1892/ 1892L/ 286 PG-LND101/102 | 6.2.21.0 - 8.7.1.0 |
LAN cards
PG-2861/ 2861L/ 289/ 289L | 9.0.15.0 - 9.1.34.0 |
How to check the driver versions
Open Device Manager.
Right-click on the adapter, and select Properties.
Select “Driver”.
Observe the Driver Version. This is a number of the form x.x.x.x.
b. Corresponding OS
- Microsoft(R) Windows(R) 2000 Server
- Microsoft(R) Windows(R) 2000 Advanced Server
- Microsoft(R) Small Business Server 2000
- Microsoft(R) Windows Server TM 2003, Standard Edition
- Microsoft(R) Windows Server TM 2003, Enterprise Edition
- Microsoft(R) Windows Server TM 2003, Standard x64 Edition
- Microsoft(R) Windows Server TM 2003, Enterprise x64 Edition
- Microsoft(R) Windows(R) Small Business Server 2003
- Microsoft(R) Windows Server TM 2003 R2, Standard Edition
- Microsoft(R) Windows Server TM 2003 R2, Enterprise Edition
- Microsoft(R) Windows Server TM 2003 R2, Standard x64 Edition
- Microsoft(R) Windows Server TM 2003 R2, Enterprise x64 Edition
c. Patch information
Onboard/ PG-18xx/ 28xx/ PG-LND10x LAN Driver & Intel(R) PROSet for Windows 2000 & Windows 2003 V11.2
URL:http://www.fujitsu.com/downloads/PRMRGY/windows-drivers-downloads.pdf
4. Revision history
- April 19th, 2007 : Initial release