CVE-2002-0597
Microsoft Windows 2000 - Denial of Service via Malformed Data to Microsoft-DS Port
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2002-0597. PoCs published by ch0wn, Daniel Nystrom.
AI-analyzed exploit summary The provided text describes a denial-of-service (DoS) vulnerability in Windows 2000's Lanman service, triggered by sending malformed data to port 445, leading to high CPU and kernel memory usage. No actual exploit code is included, only a reference to a GitLab link for a binary exploit.
Description
LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformed data to microsoft-ds port 445.
Exploits (2)
The provided text describes a denial-of-service (DoS) vulnerability in Windows 2000's Lanman service, triggered by sending malformed data to port 445, leading to high CPU and kernel memory usage. No actual exploit code is included, only a reference to a GitLab link for a binary exploit.
This exploit sends a large number of NULL byte strings to port 445 (Microsoft DS) on a Windows 2000 target, causing high CPU and memory usage in the Lanman service, leading to a denial of service (DoS). It supports both TCP and UDP protocols for the attack.