• See Also
• Current Updates

• Microsoft Security Resources
• Security Incidents
• Security Resources

• Juniper Networks Product Solutions for Microsoft
• Get detailed information about Juniper solutions that protect your Microsoft environment:
• SSL VPNs
• Intrusion Prevention
• Firewall / VPN Central Management34 KB
• VPN Resiliency594 KB
• Denial of Service and Attack Prevention754 KB
• Antivirus Protection55 KB

March 2009

---

Prior Updates:

---

Login to learn more about how Juniper Networks products can protect you from these vulnerabilities. (If you don't already have a login, see Requesting Support.)

March 2009

Microsoft Security Bulletin MS09-006

Vulnerabilities in Windows Kernel Could Allow Remote Code Execution (958690)

Severity: Critical
Vulnerabilities:

• Windows Kernel Input Validation Vulnerability - CVE-2009-0081
  A remote code execution vulnerability exists in the Windows kernel due to improper validation of input passed from user mode through the kernel component of GDI. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
• Windows Kernel Handle Validation Vulnerability - CVE-2009-0082
  An elevation of privilege vulnerability exists in the Windows kernel due to the manner in which the kernel validates handles. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
• Windows Kernel Invalid Pointer Vulnerability - CVE-2009-0083
  An elevation of privilege vulnerability exists in the Windows kernel due to improper handling of a specially crafted invalid pointer. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

Microsoft Security Bulletin MS09-007

Vulnerability in SChannel Could Allow Spoofing (960225)

Severity: Important
Vulnerabilities:

• SChannel Spoofing Vulnerability - CVE-2009-0085
  A spoofing vulnerability exists in the Microsoft Windows SChannel authentication component when using certificate based authentication. An attacker who successfully exploited this vulnerability would be able to authenticate to a server using only an authorized user’s digital certificate and without the associated private key.

Microsoft Security Bulletin MS09-008

Vulnerabilities in DNS and WINS server could allow Spoofing (962238)

Severity: Important
Vulnerabilities:

• DNS Server Query Validation Vulnerability - CVE-2009-0233
  A spoofing vulnerability exists in Windows DNS server. This vulnerability could allow a remote unauthenticated attacker to quickly and reliably spoof responses and insert records into the DNS server's cache, thereby redirecting Internet traffic.
• DNS Server Response Validation Vulnerability - CVE-2009-0234
  A response validation vulnerability exists in Windows DNS Server. The vulnerability could allow an unauthenticated remote attacker to send specially crafted queries to a DNS server so as to allow greater predictability of transaction IDs used by the DNS server and thus to redirect Internet traffic from legitimate locations.
• DNS Server Vulnerability in WPAD Registration Vulnerability- CVE-2009-0093
  A man-in-the-middle attack vulnerability exists in Windows DNS servers where dynamic update is used and ISATAP and WPAD are not already registered in DNS. This vulnerability could allow a remote authenticated attacker to spoof a web proxy thereby redirect Internet traffic to an address of the attacker's choice.
• WPAD WINS Server Registration Vulnerability - CVE-2009-0094
  A man-in-the-middle attack vulnerability exists in Windows WINS servers. This vulnerability could allow a remote authenticated attacker to spoof a web proxy and thereby redirect Internet traffic to an address of the attacker's choice.