Denial of Service in Microsoft Directory Services Port 445
A Denial of Service (DoS) condition exists in Microsoft’s Directory Services running on TCP port 445.
April 21, 2002
Reported April 17, 2002, by PeterGründl.
VERSIONS AFFECTED
Windows 2000 Advanced Server Service Pack 1 (SP1) and SP2
Windows 2000 Server SP1 and SP2
Windows 2000 Professional SP1 and SP2
DESCRIPTION
ADenial of Service (DoS) condition exists in Microsoft’s Directory Servicesrunning on TCP port 445. An attacker sending a large streamof null characters or malformed characters to the service can freeze the systembecause of CPU and kernel-resource depletion or, in some cases, can cause a bluescreen.
VENDOR RESPONSE
Thevendor, Microsoft, has released twoworkarounds that mitigate this vulnerability.
CREDIT
Discovered by PeterGründl.
Read more about:
MicrosoftAbout the Author
You May Also Like