DOCUMENT:Q273476  07-FEB-2001  [sms]
TITLE   :SMS: Buffer Overrun Problem in Several Network Monitor Parsers
PRODUCT :Microsoft Systems Management Server
PROD/VER::1.2,1.2 SP1,1.2 SP2,1.2 SP3,1.2 SP4,2.0,2.0 SP1,2.0 SP2
OPER/SYS:
KEYWORDS:kbsms200 kbsms200bug kbNetMon kbsms200preSP3fix kbsms200SP3fix

======================================================================
-------------------------------------------------------------------------------
The information in this article applies to:

 - Microsoft Systems Management Server versions 1.2, 1.2 SP1, 1.2 SP2, 1.2 SP3, 1.2 SP4, 2.0, 2.0 SP1, 2.0 SP2 
-------------------------------------------------------------------------------

SYMPTOMS
========

Buffer overruns may cause security problems in the Network Monitor tool.

RESOLUTION
==========

Systems Management Server 2.0
-----------------------------

To resolve this problem, obtain the latest service pack for Systems Management
Server version 2.0. For additional information, please see the following article
in the Microsoft Knowledge Base:

   Q288239 SMS: How to Obtain the Latest Systems Management Server 2.0 Service
   Pack

The following file is available for download from the Microsoft Download Center:

   Q273476c.exe (http://www.microsoft.com/downloads/release.asp?ReleaseID=25514)

For additional information about how to download Microsoft Support files, click
the article number below to view the article in the Microsoft Knowledge Base:

   Q119591 How to Obtain Microsoft Support Files from Online Services

Microsoft used the most current virus detection software available on the date of
posting to scan this file for viruses. Once posted, the file is housed on secure
servers that prevent any unauthorized changes to the file.



Systems Management Server 1.2
-----------------------------

To resolve this problem, obtain the latest service pack for Systems Management
Server version 2.0. For additional information, please see the following article
in the Microsoft Knowledge Base:

   Q288239 SMS: How to Obtain the Latest Systems Management Server 2.0 Service
   Pack

The following file is available for download from the Microsoft Download Center:

   Q273476c.exe (http://www.microsoft.com/downloads/release.asp?ReleaseID=25505)

For additional information about how to download Microsoft Support files, click
the article number below to view the article in the Microsoft Knowledge Base:

   Q119591 How to Obtain Microsoft Support Files from Online Services

Microsoft used the most current virus detection software available on the date of
posting to scan this file for viruses. Once posted, the file is housed on secure
servers that prevent any unauthorized changes to the file.



STATUS
======

Microsoft has confirmed this to be a problem in the Microsoft products that are
listed at the beginning of this article. This problem was first corrected in
Systems Management Server 2.0 Service Pack 3.

MORE INFORMATION
================

For more information on this vulnerability, see the following Microsoft Web
site:

   http://www.microsoft.com/technet/security/bulletin/fq00-083.asp

Additional query words: prodsms

======================================================================
Keywords          : kbsms200 kbsms200bug kbNetMon kbsms200preSP3fix kbsms200SP3fix 
Technology        : kbSMSSearch kbSMS120 kbSMS200 kbSMS120SP2 kbSMS120SP3 kbSMS120SP4 kbSMS200SP1 kbSMS200SP2 kbSMS120SP1
Version           : :1.2,1.2 SP1,1.2 SP2,1.2 SP3,1.2 SP4,2.0,2.0 SP1,2.0 SP2
Issue type        : kbbug
Solution Type     : kbfix

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND.  MICROSOFT DISCLAIMS
ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  IN NO
EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR
ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL,
CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF
MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.  SOME STATES DO NOT ALLOW THE EXCLUSION
OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES
SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright Microsoft Corporation 2001.