Malformed Request to Domain Controller can Cause Memory Exhaustion New

A core service running on all Windows 2000 domain controllers contains a flaw affecting how it processes a certain type of invalid service request which could cause memory exhaustion.

Issue

A core service running on all Windows 2000 domain controllers (but not on any other machines) contains a memory leak, which can be triggered when it attempts to process a certain type of invalid service request. By repeatedly sending such a request, an attacker could deplete the available memory on the server. If memory were sufficiently depleted, the domain controller could become unresponsive, which would prevent it from processing logon requests or issuing new Kerberos tickets. An affected machine could be put back into service by rebooting.

Affected Products

• Windows 2000 Server and Advanced Server

Download

Patch: http://www.microsoft.com/Downloads/Release.asp?ReleaseID=29537

Further Details

Source: Microsoft Corporation

Reference: Microsoft Corporation

Updated: May 8, 2001

>> Recommended Download - secure your PC from spyware, adware and malware now with Spyware Doctor <<