Microsoft Windows 2000 Lanman Denial of Service Vulnerability

Bugtraq ID:	4532
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 17 2002 12:00AM
Updated:	Apr 17 2002 12:00AM
Credit:	Published in Microsoft Knowledge Base Article Q320751.
Vulnerable:	Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server + Avaya DefinityOne Media Servers + Avaya IP600 Media Servers + Avaya S3400 Message Application Server 0 + Avaya S8100 Media Servers 0 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server
Not Vulnerable:	Microsoft Windows 2000 Terminal Services SP3 + Microsoft Windows 2000 Advanced Server SP3 + Microsoft Windows 2000 Datacenter Server SP3 + Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Advanced Server SP3

Microsoft Windows 2000 Lanman Denial of Service Vulnerability

No exploit code required.

It has been suggested that a constant stream of null characters to the vulnerable service is sufficient to exploit this vulnerability.

• /data/vulnerabilities/exploits/crashMs-ds.rc2.tar.gz
• /data/vulnerabilities/exploits/ms-ds-xploit.c

Microsoft Windows 2000 Lanman Denial of Service Vulnerability

Solution:
This issue was fixed in Windows 2000 SP3.


Microsoft Windows 2000 Server SP2

• Microsoft Windows 2000 SP3
  http://www.microsoft.com/windows2000/downloads/servicepacks/sp3/sp3lan g.asp

Microsoft Windows 2000 Advanced Server SP2

• Microsoft Windows 2000 SP3
  http://www.microsoft.com/windows2000/downloads/servicepacks/sp3/sp3lan g.asp

Microsoft Windows 2000 Professional SP2

• Microsoft Windows 2000 SP3
  http://www.microsoft.com/windows2000/downloads/servicepacks/sp3/sp3lan g.asp