Oval Definition:
oval:org.mitre.oval:def:334
Revision Date
:
2011-05-16
Version
:
19
Title
:
Windows NNTP Memory Leak
Description
:
Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts.
Family
:
windows
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2001-0543
Platform(s)
:
Microsoft Windows 2000
Product(s)
:
Network News Transport Protocol (NNTP)
Definition Synopsis
Software section
Windows 2000 is installed
AND
NOT
Win2K/XP/2003 service pack 3 (or later) is installed
AND
the version of nntpsvc.dll is less than 5.0.2195.3881
AND
NOT
Patch Q303984 Installed
AND
Configuration section
the NNTP service is enabled
BACK