MS.Windows.MSDTC.Denial.Of.Service

Release Date Sep 16, 2011
Severity medium
Impact System compromise.
Description This indicates an attack attempt against a Memory Corruption vulnerability in Microsoft Distributed Transaction Coordinator (MSDTC). The vulnerability is caused by an error when the software handles parameters passed to vulnerable functions in MSDTCPRX.DLL. It allows a remote attacker to execute arbitrary code via sending a crafted "RPC" request.
Affected Products Windows 2000 Server SP0 - SP4 (Remote Execution) Windows XP SP1 (local privilege elevation only) Windows 2003 Server (local privilege elevation only)
Recommended Actions Refer to the vendor's web site for a suggested workground: http://www.microsoft.com/technet/security/Bulletin/MS05-051.mspx
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2006-1184
Reference/s http://www.securityfocus.com/bid/17905 (BugTraq) http://technet.microsoft.com/en-us/security/bulletin/ms06-018.mspx (MS-ID)

Fortinet