Detections
Analytics
MS02-045: Microsoft Windows SMB Protocol SMB_COM_TRANSACTION Packet Remote Overflow DoS (326830) (uncredentialed check)
high Nessus Plugin ID 11110
Synopsis
The remote host is vulnerable to a denial of service attack.Description
The remote host is vulnerable to a denial of service attack in its SMB stack.An attacker may exploit this flaw to crash the remote host remotely, without any authentication.
Solution
Apply the appropriate patches from MS02-045 or apply the latest Windows service pack.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2002/ms02-045
Plugin Details
Severity: High
ID: 11110
File Name: smb_null_params_dos.nasl
Version: 1.46
Type: local
Agent: windows
Family: Windows
Published: 8/23/2002
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/o:microsoft:windows
Required KB Items: SMB/name, SMB/login, SMB/password
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 8/22/2002
Reference Information
CVE: CVE-2002-0724
BID: 5556
MSFT: MS02-045
MSKB: 326830