Malformed RPC Packet Vulnerability

If a malicious user transmits a malformed Remote Procedure Call (RPC) client packet to a Windows 2000-based computer, the RPC Server service on the host computer may stop responding (hang).

Issue

A remote denial of service vulnerability has been discovered in Microsoft Windows 2000 Server. The denial of service can occur when a malicious client sends a particular malformed RPC (Remote Procedure Call) packet to the server, causing the RPC service to fail.

Windows 2000 servers that are directly exposed to the Internet are at greatest risk from this vulnerability. A server behind a firewall that blocks ports 135-139 and 445 will not be affected by this vulnerability from the Internet.

RPC services and the functioning of the server could be restored after an attack by rebooting the affected computer.

Affected Products

• Microsoft Windows 2000

Download

Patch: http://www.microsoft.com/Downloads/Release.asp?ReleaseID=24229

Further Details

Source: Microsoft Corporation

Reference: Microsoft Corporation

Updated: September 11, 2000

>> Recommended Download - secure your PC from spyware, adware and malware now with Spyware Doctor <<