Microsoft Windows 2000 Print Spooler DoS Vulnerability

Posted Monday, December 04, 2006 10:14 PM by hwaldron

A minor new vulnerability for W/2000 emerged over the weekend.

Microsoft Windows 2000 Print Spooler DoS Vulnerability
http://secunia.com/advisories/23196/
http://www.frsirt.com/english/advisories/2006/4827

QUOTE: The vulnerability is caused due to an error in the handling of RPC requests within the Print Spooler service. This can be exploited to consume almost all available memory via a specially crafted packet, which may result in a system crash.  The vulnerability is confirmed on a fully patched Windows 2000 SP4 system. Other versions may also be affected.

Solution: Restrict access to the service or disable the Print Spooler service

Comments

# myITforum Daily Newsletter; December 5, 2006

Tuesday, December 05, 2006 9:37 AM by myITforum Newsletters

myITforum Daily Newsletter Daily Newsletter December 5, 2006 The myITforum.com newsletter is delivered