OVAL Repository - View Definition: oval:org.mitre.oval:def:957

OVAL Repository > View Definition

View Definition

NEW SEARCH : BACK

Definition Id: oval:org.mitre.oval:def:957		Version: 1 Last Modified: 2005-09-27
Title:	Server 2003 RPCSS Service DCOM Activation Denial of Service
Description:	An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.
Family:	windows	Class:	vulnerability
Status:	INTERIM	Reference(s):	CVE-2004-0116
Platform(s):	Microsoft Windows Server 2003	Product(s):	Remote Procedure Call (RPC)
Definition Synopsis:
Software section Windows Server 2003 is installed AND a vulnerable version of rpcss.dll exists on Server 2003 32-bit machine a vulnerable version of rpcss.dll exists 32-Bit version of Windows is installed AND a vulnerable version of rpcss.dll exists on non 64-bit Server 2003 machine has followed the GDR update path and rpcss.dll is less than 5.2.3790.132 OR machine has followed the QFE update path and rpcss.dll is less than 5.2.3790.142 OR 64-bit machine and rpcss.dll is less than 5.2.3790.146 a version of Windows for the ia64 architecture is installed AND the version of rpcss.dll is less than 5.2.3790.142 AND NOT the patch kb828741 is installed AND Configuration section DCOM is enabled

NEW SEARCH : BACK

OVAL Repository

About the Repository

OVAL Repository Forum

Author’s Resources

Items of Interest