PT-2001-1719 · Microsoft · Windows 2000+3

Publicado 2001-08-29 · Atualizado 2020-04-02 · CVE-2001-0509

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server versions prior to 2000 Microsoft SQL Server versions prior to 2000 Windows NT 4.0 Windows 2000

Description: The issue allows remote attackers to cause a denial of service via malformed inputs to RPC servers.

Recommendations: For Microsoft Exchange Server versions prior to 2000, update to a version later than 2000 to resolve the issue. For Microsoft SQL Server versions prior to 2000, update to a version later than 2000 to resolve the issue. For Windows NT 4.0 and Windows 2000, consider applying configuration changes to restrict access to RPC servers until an update is available.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2001-0509

Produtos afetados

Exchange Server

Sql Server

Windows 2000

Windows Nt 4.0

Referências · 4

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0509 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0509 · Nota de Segurança