CVE-2002-0224

Microsoft IIS 5.0 and SQL Server 6.5-2000 - Denial of Service via Malformed MSDTC Input

Title source: llm
STIX 2.1

Description

The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input.

References (4)

Core 4
Core References
Vendor Advisory mailing-list x_refsource_bugtraq
http://online.securityfocus.com/archive/1/268593
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/8046.php
Vendor Advisory mailing-list x_refsource_bugtraq
http://online.securityfocus.com/archive/1/253360
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/4006

Scores

EPSS 0.2086
EPSS Percentile 97.3%

Details

Status published
Products (5)
microsoft/internet_information_services 5.0
microsoft/sql_server 6.5
microsoft/sql_server 7.0 (4 CPE variants)
microsoft/sql_server 2000 (3 CPE variants)
microsoft/windows_2000 (3 CPE variants)
Published May 16, 2002
Tracked Since Feb 18, 2026