ID CVE-2001-0543
Summary Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts.
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*
    cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 02-04-2020 - 12:52)
Impact:
Exploitability:
CWE CWE-401
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
oval via4
accepted 2011-05-16T04:02:45.224-04:00
class vulnerability
contributors
  • name Christine Walzer
    organization The MITRE Corporation
  • name Shane Shaffer
    organization G2, Inc.
  • name Sudhir Gandhe
    organization Telos
  • name Shane Shaffer
    organization G2, Inc.
description Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts.
family windows
id oval:org.mitre.oval:def:334
status accepted
submitted 2003-09-16T12:00:00.000-04:00
title Windows NNTP Memory Leak
version 32
refmap via4
bid 3183
xf win-nntp-dos(6977)
Last major update 02-04-2020 - 12:52
Published 20-09-2001 - 04:00
Last modified 02-04-2020 - 12:52
Back to Top