Executive Summary
| Informations | |||
|---|---|---|---|
| Name | MS01-041 | First vendor Publication | N/A |
| Vendor | Microsoft | Last vendor Modification | N/A |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Malformed RPC Request Can Cause Service Failure |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-20 | Improper Input Validation |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:82 | |||
| Oval ID: | oval:org.mitre.oval:def:82 | ||
| Title: | Microsoft RPC Denial of Service | ||
| Description: | Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2001-0509 | Version: | 2 |
| Platform(s): | Microsoft Windows 2000 | Product(s): | Microsoft SQL Server 2000 |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 3 | |
| Application | 2 | |
| Application | 1 | |
| Os | 2 | |
| Os | 1 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2006-03-26 | Name : Microsoft's SQL Version Query File : nvt/mssql_version.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 10160 | Multiple RPC Servers Malformed Input Remote DoS Windows, Exchange and SQL Server contain a flaw that may allow a remote denial of service. The issue is triggered when sending a large stream of NULL requests to every interface supported by a DCE/RPC server, and will result in loss of availability for the platform. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2003-03-12 | Name : The remote host is vulnerable to privilege escalation. File : smb_nt_ms02-001.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:44:35 |
|
