ID CVE-2002-0224
Summary The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input.
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sql_server:6.5:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sql_server:6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 30-04-2019 - 14:27)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 4006
bugtraq
  • 20020131 msdtc on 3372
  • 20020419 KPMG-2002015: Microsoft Distributed Transaction Coordinator DoS
xf msdtc-default-port-dos(8046)
Last major update 30-04-2019 - 14:27
Published 16-05-2002 - 04:00
Last modified 30-04-2019 - 14:27
Back to Top