Vulnerability Assessment & Network Security Forums

If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.

Home >> Browse Vulnerability Assessment Database >> Denial of Service >> MS RPC Services null pointer reference DoS

Vulnerability Assessment Details

MS RPC Services null pointer reference DoS

Vulnerability Assessment Summary
Attempts to crash MS RPC service the Spike 2.7-way

Detailed Explanation for this Vulnerability Assessment

MS Windows RPC service (RPCSS) crashes trying to dereference a
null pointer when it receives a certain malformed request.
All MS RPC-based services (i.e. a large part of MS Windows 2000+)
running on the target machine are rendered inoperable.

Solution : Block access to TCP port 135.
Network Security Threat Level: High

Networks Security ID: 6005

Vulnerability Assessment Copyright: This script is Copyright (C) 2002 Pavel Kankovsky

Cables, Connectors