MS03-010: Microsoft Windows RPC Endpoint Manager Malformed Packet DoS (331953) (intrusive check)

medium Nessus Plugin ID 11159

Synopsis

The remote Windows host is affected by a denial of service vulnerability.

Description

MS Windows RPC service (RPCSS) crashes trying to dereference a NULL pointer when it receives a certain malformed request. All MS RPC-based services (i.e. a large part of MS Windows 2000+) running on the target machine are rendered inoperable.

Solution

Apply the patch referenced in the Microsoft bulletin.

Plugin Details

Severity: Medium

ID: 11159

File Name: msrpc-spike27.nasl

Version: 1.31

Type: remote

Agent: windows

Family: Windows

Published: 11/21/2002

Updated: 4/11/2022

Configuration: Enable paranoid mode, Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 2.2

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: Settings/ParanoidReport

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 10/18/2002

Reference Information

CVE: CVE-2002-1561

BID: 6005

MSFT: MS03-010

MSKB: 331953

Detections

Analytics