Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length.
http://www.securityfocus.com/bid/1304
http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0231.html