Denial of Service in Microsoft Directory Services Port 445

A Denial of Service (DoS) condition exists in Microsoft’s Directory Services running on TCP port 445.

Ken Pfeil

April 21, 2002

1 Min Read
ITPro Today logo in a gray background | ITPro Today

Reported April 17, 2002, by PeterGründl.

VERSIONS AFFECTED

  • Windows 2000 Advanced Server Service Pack 1 (SP1) and SP2

  • Windows 2000 Server SP1 and SP2

  • Windows 2000 Professional SP1 and SP2

 

DESCRIPTION

ADenial of Service (DoS) condition exists in Microsoft’s Directory Servicesrunning on TCP port 445. An attacker sending a large streamof null characters or malformed characters to the service can freeze the systembecause of CPU and kernel-resource depletion or, in some cases, can cause a bluescreen.

 


VENDOR RESPONSE

 

Thevendor, Microsoft, has released twoworkarounds that mitigate this vulnerability.

 

CREDIT
Discovered by PeterGründl.

Read more about:

Microsoft
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like