COMMAND

    keygen

SYSTEMS AFFECTED

    Win NT 4.0 with SP3

PROBLEM

    Craig Baltzer posted  following info.   It appears that  a bug has
    been  introduced  with  SP3  in  keygen  (used for installation of
    certificates in  IIS). When  the cn  is exactly  14 characters  in
    length, then you'll get the following application error:

    "The instruction at 0x77f7d514 referenced memory at 0x6e676953.
     The memory could not be written"

    This problem only  seems to occur  when the value  for "CN" is  14
    bytes in length. For example the command:

    keygen -bits 512 boner anjura.key anjura.reg "C=CA, O=Anjura Technology
    Corporation, OU=HQ, S=Ontario, L=Ottawa, CN=www.anjura.com"

    will generate the error, however:

    keygen -bits 512 boner anjura.key anjura.reg "C=CA, O=Anjura Technology
    Corporation, OU=HQ, S=Ontario, L=Ottawa, CN=ww.anjura.com"

    or

    keygen -bits 512 boner anjura.key anjura.reg "C=CA, O=Anjura Technology
    Corporation, OU=HQ, S=Ontario, L=Ottawa, CN=wwww.anjura.com"

SOLUTION

    Microsoft has been notified and there is no fix available yet.