PT-2001-1719 · Microsoft · Windows 2000+3

Published 2001-08-29 · Updated 2020-04-02 · CVE-2001-0509

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server versions prior to 2000 Microsoft SQL Server versions prior to 2000 Windows NT 4.0 Windows 2000

Description: The issue allows remote attackers to cause a denial of service via malformed inputs to RPC servers.

Recommendations: For Microsoft Exchange Server versions prior to 2000, update to a version later than 2000 to resolve the issue. For Microsoft SQL Server versions prior to 2000, update to a version later than 2000 to resolve the issue. For Windows NT 4.0 and Windows 2000, consider applying configuration changes to restrict access to RPC servers until an update is available.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2001-0509

Affected Products

Exchange Server

Sql Server

Windows 2000

Windows Nt 4.0

References · 4

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0509 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0509 · Note