CVE-2005-1979: Medium severity Microsoft Windows 2003 Server vulnerability

Published Oct 11, 2005

Updated

Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit) via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol (TIP) functionality.

Affected Software

9 affected components

Microsoft Windows 2003 Server=64-bit

Microsoft Windows 2003 Server=itanium

Microsoft Windows 2003 Server=sp1

Microsoft Windows XP

Microsoft Windows XP=sp1

Microsoft Windows 2003 Server=sp1

Microsoft Windows 2003 Server=r2

Microsoft Windows 2000=sp4

Microsoft Windows XP=sp2

Event History

Oct 11, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1979?

CVE-2005-1979 is classified as a denial of service vulnerability.

How do I fix CVE-2005-1979?

To fix CVE-2005-1979, apply the latest security patches from Microsoft for affected versions of Windows.

Which systems are affected by CVE-2005-1979?

CVE-2005-1979 affects Microsoft Windows 2000, Windows XP, and Windows 2003 Server, including specific service packs and architectures.

What does CVE-2005-1979 exploit?

CVE-2005-1979 exploits a flaw in the Distributed Transaction Controller's handling of unexpected protocol commands during reconnection requests.

Can CVE-2005-1979 lead to system crashes?

Yes, CVE-2005-1979 can cause the MSDTC service to exception and exit, leading to denial of service.