CVEvulnerability
CVE-2002-2077
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an "alter context" request, which may allow remote attackers to obtain sensitive information by sniffing the session.
Affected configurations
• microsoft windows 2000
Related
Referenced by CWE · observed example (1)
- CWE-226 Sensitive Information in Resource Not Removed Before Reuse weakness
References
- http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq300367 support.microsoft.com
- http://www.bindview.com/Services/razor/Advisories/2002/adv_dcom.cfm Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8739.php Patch
- http://www.securityfocus.com/bid/4410 Patch
- http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq300367 support.microsoft.com
- http://www.bindview.com/Services/razor/Advisories/2002/adv_dcom.cfm Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8739.php Patch
- http://www.securityfocus.com/bid/4410 Patch