CVE-2002-2077

Description

The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an "alter context" request, which may allow remote attackers to obtain sensitive information by sniffing the session.

References

http://www.securityfocus.com/bid/4410

http://www.iss.net/security_center/static/8739.php

http://www.bindview.com/Services/razor/Advisories/2002/adv_dcom.cfm

http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq300367

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS