{"api_version":"1","generated_at":"2026-07-24T17:29:39+00:00","cve":"CVE-2002-2077","urls":{"html":"https://cve.report/CVE-2002-2077","api":"https://cve.report/api/cve/CVE-2002-2077.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2002-2077","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-2077"},"summary":{"title":"CVE-2002-2077","description":"The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an \"alter context\" request, which may allow remote attackers to obtain sensitive information by sniffing the session.","state":"PUBLISHED","assigner":"mitre","published_at":"2002-12-31 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.iss.net/security_center/static/8739.php","name":"http://www.iss.net/security_center/static/8739.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"ISS X-Force Database: win2k-dcom-memory-leak (8739): Windows 2000 DCOM memory leak","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.bindview.com/Services/razor/Advisories/2002/adv_dcom.cfm","name":"http://www.bindview.com/Services/razor/Advisories/2002/adv_dcom.cfm","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"BindView -","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/4410","name":"http://www.securityfocus.com/bid/4410","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Windows 2000 DCOM Client Memory Disclosure Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq300367","name":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq300367","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Microsoft Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.microsoft.com/default.aspx?scid=kb;EN-US;q300367","name":"MSKB:Q300367","refsource":"MITRE","tags":[],"title":"Microsoft Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2002-2077","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-2077","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2002","cve_id":"2077","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_2000","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"2077","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_2000","cpe6":"*","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"2077","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows_2000","cpe6":"*","cpe7":"sp2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T03:51:17.563Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"4410","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/4410"},{"name":"20020402 Windows 2000 DCOM clients may leak sensitive information onto the network","tags":["vendor-advisory","x_refsource_BINDVIEW","x_transferred"],"url":"http://www.bindview.com/Services/razor/Advisories/2002/adv_dcom.cfm"},{"name":"Q300367","tags":["vendor-advisory","x_refsource_MSKB","x_transferred"],"url":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq300367"},{"name":"win2k-dcom-memory-leak(8739)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"http://www.iss.net/security_center/static/8739.php"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an \"alter context\" request, which may allow remote attackers to obtain sensitive information by sniffing the session."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2005-07-14T04:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"4410","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/4410"},{"name":"20020402 Windows 2000 DCOM clients may leak sensitive information onto the network","tags":["vendor-advisory","x_refsource_BINDVIEW"],"url":"http://www.bindview.com/Services/razor/Advisories/2002/adv_dcom.cfm"},{"name":"Q300367","tags":["vendor-advisory","x_refsource_MSKB"],"url":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq300367"},{"name":"win2k-dcom-memory-leak(8739)","tags":["vdb-entry","x_refsource_XF"],"url":"http://www.iss.net/security_center/static/8739.php"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2002-2077","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an \"alter context\" request, which may allow remote attackers to obtain sensitive information by sniffing the session."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"4410","refsource":"BID","url":"http://www.securityfocus.com/bid/4410"},{"name":"20020402 Windows 2000 DCOM clients may leak sensitive information onto the network","refsource":"BINDVIEW","url":"http://www.bindview.com/Services/razor/Advisories/2002/adv_dcom.cfm"},{"name":"Q300367","refsource":"MSKB","url":"http://support.microsoft.com/default.aspx?scid=kb;EN-US;q300367"},{"name":"win2k-dcom-memory-leak(8739)","refsource":"XF","url":"http://www.iss.net/security_center/static/8739.php"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2002-2077","datePublished":"2005-07-14T04:00:00.000Z","dateReserved":"2005-07-14T00:00:00.000Z","dateUpdated":"2024-09-16T19:51:18.040Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2002-12-31 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2002","CveId":"2077","Ordinal":"1","Title":"CVE-2002-2077","CVE":"CVE-2002-2077","Year":"2002"},"notes":[{"CveYear":"2002","CveId":"2077","Ordinal":"1","NoteData":"The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an \"alter context\" request, which may allow remote attackers to obtain sensitive information by sniffing the session.","Type":"Description","Title":"CVE-2002-2077"},{"CveYear":"2002","CveId":"2077","Ordinal":"2","NoteData":"2005-07-14","Type":"Other","Title":"Published"}]}}}