CVE-2002-2077

Published: Dec 31, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an "alter context" request, which may allow remote attackers to obtain sensitive information by sniffing the session.

Affected (3)

Products: Microsoft: Windows 2000

Microsoft

1 product

Windows 2000

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions

References (8)

http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq300367

Source: cve@mitre.org

http://www.bindview.com/Services/razor/Advisories/2002/adv_dcom.cfm

Source: cve@mitre.org

PatchVendor Advisory

http://www.iss.net/security_center/static/8739.php

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/4410

Source: cve@mitre.org

Patch

http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq300367

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.bindview.com/Services/razor/Advisories/2002/adv_dcom.cfm

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.iss.net/security_center/static/8739.php

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/4410

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.