This host is missing a critical security update according to Microsoft Bulletin MS09-071.

Successful exploitation will let the remote attackers take complete control of an affected system. Servers using Internet Authentication Service are only affected when using PEAP with MS-CHAP v2 authentication. Impact Level: System

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/bulletin/ms09-071.mspx

This issue is caused by an error when messages received by the Internet Authentication Service server are being copied incorrectly into memory while handling PEAP authentication attempts.

Microsoft Windows 2k Service Pack 4 and prior. Microsoft Windows Xp Service Pack 3 and prior. Microsoft Windows 2k3 Service Pack 2 and prior. Microsoft Windows Vista Service Pack 1/2 and prior. Microsoft Windows Server 2008 Service Pack 1/2 and prior.

• http://support.microsoft.com/kb/974318
• http://www.microsoft.com/technet/security/bulletin/MS09-071.mspx

---

Updated on 2015-03-25