CVE-2002-1561
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft Windows 2000/XP是微软公司开发的WINDOWS操作系统。Microsoft Windows 2000/XP的RPC服务存在漏洞，远程攻击者可以利用这个漏洞进行拒绝服务攻击。漏洞存在于Windows系统的DCE-RPC堆栈实现中，远程攻击者可以连接TCP 135端口，发送畸形数据，可导致关闭RPC服务，关闭RPC服务可以引起系统停止对新的RPC请求进行响应，产生拒绝服务。由于众多服务都依赖于RPC服务， 这可能使系统变得不稳定， 很多正常操作无法进行. 例如， Word中将
Public Exploits 4
Possible ATT&CK Techniques 1 AI
T1499.002 · Service Exhaustion Flood
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2002-1561
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Windows 2000/XP RPC服务远程拒绝服务攻击漏洞(MS03-010)
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Windows 2000/XP是微软公司开发的WINDOWS操作系统。Microsoft Windows 2000/XP的RPC服务存在漏洞，远程攻击者可以利用这个漏洞进行拒绝服务攻击。漏洞存在于Windows系统的DCE-RPC堆栈实现中，远程攻击者可以连接TCP 135端口，发送畸形数据，可导致关闭RPC服务，关闭RPC服务可以引起系统停止对新的RPC请求进行响应，产生拒绝服务。由于众多服务都依赖于RPC服务， 这可能使系统变得不稳定， 很多正常操作无法进行. 例如， Word中将
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2002-1561
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2002-1561
请登录查看更多情报信息。
Vendor Advisories for CVE-2002-1561 (3)
-
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-010 vendor-advisory x_refsource_MS
-
http://www.securityfocus.com/archive/1/296114/2002-10-14/2002-10-20/0 mailing-list x_refsource_BUGTRAQ
Same Patch Batch · n/a · 2003-03-26 · 11 CVEs total
| CVE-2002-0030 | Adobe Acrobat插件伪造数字签名漏洞 | |
| CVE-2003-0072 | MIT Kerberos 5 Principal名远程缓冲区错误漏洞 | |
| CVE-2003-0082 | MIT Kerberos 5 Principal Name缓冲区溢出漏洞 | |
| CVE-2003-0152 | Mozilla Bonsai远程命令执行漏洞 | |
| CVE-2003-0153 | Mozilla Bonsai远程路径信息泄露漏洞 | |
| CVE-2003-0154 | Mozilla Bonsai多个跨站脚本执行漏洞 | |
| CVE-2003-0155 | Mozilla Bonsai参数页面未授权访问漏洞 | |
| CVE-2003-0159 | Ethereal NTLMSSP解析器堆破坏漏洞 | |
| CVE-2003-0160 | 多个SquirrelMail跨站脚本漏洞 | |
| CVE-2003-0162 | Ecartis隐藏表单字段密码修改漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2002-1561
No comments yet