CVE-2000-0544: Medium severity Microsoft Windows NT vulnerability
Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable SMB/CIFS file sharing and any unneeded DCE/RPC services on Windows 2000 and Windows NT hosts if those services are not required, to prevent processing of SMBwriteX requests.
SMB/CIFS and DCE/RPC services (handles SMBwriteX) SMB/CIFS file sharing and DCE/RPC = disabled - Compensating control
Block or restrict access to SMB and DCE/RPC from untrusted networks. Implement firewall/ACL rules to prevent external hosts from reaching Windows 2000/NT systems on SMB/RPC-related ports (for example TCP 139 and 445 and RPC endpoints) or otherwise isolate these hosts from untrusted network segments.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0544?
The severity of CVE-2000-0544 is considered high due to its ability to cause denial of service on affected systems.
How do I fix CVE-2000-0544?
To fix CVE-2000-0544, it is recommended to apply all available security updates and patches from Microsoft.
Which systems are affected by CVE-2000-0544?
CVE-2000-0544 affects Windows NT 4.0 and Windows 2000 operating systems.
What type of attack does CVE-2000-0544 involve?
CVE-2000-0544 involves a denial of service attack facilitated by malformed DCE/RPC SMBwriteX requests.
Can CVE-2000-0544 be exploited remotely?
Yes, CVE-2000-0544 can be exploited remotely by an attacker to disrupt service on affected hosts.