PT-2002-1107 · Microsoft · Windows 2000

Published 2002-10-22 · Updated 2019-04-30 · CVE-2001-1451

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 versions prior to SP3

Description A memory leak issue exists in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows. This issue can be triggered when the Print Spooler is not running, allowing remote attackers to cause a denial of service by consuming system memory. This can be achieved through a large number of GET or GETNEXT requests.

Recommendations For Microsoft Windows 2000 versions prior to SP3, apply Service Pack 3 to resolve the issue. As a temporary workaround, consider restricting access to the SNMP service to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2001-1451

Affected Products

Windows 2000

References · 5

• 🔥 http://securityfocus.com/bid/6030 · Exploit
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B296815 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1451 · Security Note
• http://kb.cert.org/vuls/id/887393 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10431 · Note