PT-2002-2797 · Microsoft · Windows 2000

Published 2002-12-31 · Updated 2019-04-30 · CVE-2002-2077

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Windows 2000 versions prior to SP3

Description: The issue concerns the DCOM client in Windows 2000, which fails to properly clear memory before sending an "alter context" request. This may allow remote attackers to obtain sensitive information by sniffing the session.

Recommendations: For Windows 2000 versions prior to SP3, apply Service Pack 3 to resolve the issue.

Fix

Related Identifiers

CVE-2002-2077

Affected Products

Windows 2000

References · 5

• http://securityfocus.com/bid/4410 · Patch
• http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq300367 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-2077 · Security Note
• http://bindview.com/Services/razor/Advisories/2002/adv_dcom.cfm · Vendor Advisory
• http://iss.net/security_center/static/8739.php · Patch