PT-2002-1107 · Microsoft · Windows 2000

Publicado 2002-10-22 · Atualizado 2019-04-30 · CVE-2001-1451

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 versions prior to SP3

Description A memory leak issue exists in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows. This issue can be triggered when the Print Spooler is not running, allowing remote attackers to cause a denial of service by consuming system memory. This can be achieved through a large number of GET or GETNEXT requests.

Recommendations For Microsoft Windows 2000 versions prior to SP3, apply Service Pack 3 to resolve the issue. As a temporary workaround, consider restricting access to the SNMP service to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2001-1451

Produtos afetados

Windows 2000

Referências · 5

• 🔥 http://securityfocus.com/bid/6030 · Exploit
• http://kb.cert.org/vuls/id/887393 · Nota
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B296815 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10431 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1451 · Nota de Segurança