PT-2002-2797 · Microsoft · Windows 2000

Publicado 2002-12-31 · Atualizado 2019-04-30 · CVE-2002-2077

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Windows 2000 versions prior to SP3

Description: The issue concerns the DCOM client in Windows 2000, which fails to properly clear memory before sending an "alter context" request. This may allow remote attackers to obtain sensitive information by sniffing the session.

Recommendations: For Windows 2000 versions prior to SP3, apply Service Pack 3 to resolve the issue.

Correção

Identificadores relacionados

CVE-2002-2077

Produtos afetados

Windows 2000

Referências · 5

• http://securityfocus.com/bid/4410 · Correção
• http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq300367 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-2077 · Nota de Segurança
• http://bindview.com/Services/razor/Advisories/2002/adv_dcom.cfm · Aviso do Fabricante
• http://iss.net/security_center/static/8739.php · Correção