CVE-2002-1561

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.kb.cert.org/vuls/id/261537US Government Resource
http://www.securityfocus.com/archive/1/296114/2002-10-14/2002-10-20/0Vendor Advisory
http://www.securityfocus.com/bid/6005Exploit, Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-010
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A59
http://www.kb.cert.org/vuls/id/261537US Government Resource
http://www.securityfocus.com/archive/1/296114/2002-10-14/2002-10-20/0Vendor Advisory
http://www.securityfocus.com/bid/6005Exploit, Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-010
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A59

Timeline

Published: Apr 2, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-15625.0Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. (dot dot) se CVE-2002-15631.2stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditions that cause an inc CVE-2002-15645.0Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains scr CVE-2002-15657.5Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly exec CVE-2002-15665.0netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of se CVE-2002-15676.8Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via CVE-2002-15685.0OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to ca CVE-2002-15697.5gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for CVE-2002-15707.5Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code vi CVE-2002-15712.1The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on proc CVE-2002-157210.0Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and at CVE-2002-157310.0Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack ve