The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_information_services | Microsoft | 5.0 (including) | 5.0 (including) |
| Sql_server | Microsoft | 6.5 (including) | 6.5 (including) |
| Sql_server | Microsoft | 7.0 (including) | 7.0 (including) |
| Sql_server | Microsoft | 7.0-sp1 (including) | 7.0-sp1 (including) |
| Sql_server | Microsoft | 7.0-sp2 (including) | 7.0-sp2 (including) |
| Sql_server | Microsoft | 7.0-sp3 (including) | 7.0-sp3 (including) |
| Sql_server | Microsoft | 2000 (including) | 2000 (including) |
| Sql_server | Microsoft | 2000-sp1 (including) | 2000-sp1 (including) |
| Sql_server | Microsoft | 2000-sp2 (including) | 2000-sp2 (including) |
References
- http://online.securityfocus.com/archive/1/253360
- http://online.securityfocus.com/archive/1/268593
- http://www.iss.net/security_center/static/8046.php
- http://www.securityfocus.com/bid/4006
- http://online.securityfocus.com/archive/1/253360
- http://online.securityfocus.com/archive/1/268593
- http://www.iss.net/security_center/static/8046.php
- http://www.securityfocus.com/bid/4006