Title: Microsoft Windows Media Services Severed Connection DoS Vulnerability
Severity: MODERATE
Description:
Microsoft Windows Media Services are the server-side component of Windows Media Technologies which provides streaming video and audio content capabilities. It is divided into types of services, Unicast and Multicast. Windows Media Unicast Services supplies media content to one client at a time as opposed to Multicast which serves multiple clients simultaneously. Windows Media Unicast Services are only affected by the vulnerability at hand.
In the event that a client establishes a connection and then severs it abruptly in a particular fashion, Windows Media Services will not release the resources it has allocated to that particular client. If Windows Media Services were to receive these connections repeatedly, resources would become depleted and reach such a level that Windows Media Services would not be able to properly service clients. Restarting the service would be required in order to regain normal functionality and any client being serviced at the time would have to re-establish their connection.
Affected Products:
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Server SP1
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP3
- Microsoft Windows 2000 Server SP4
- Microsoft Windows Media Services 4.0
- Microsoft Windows Media Services 4.1
- Microsoft Windows NT 4.0
References:
- Microsoft: Frequently Asked Questions: Microsoft Security Bulletin (MS00-097)
- Microsoft: Microsoft Security Bulletin (MS00-097)
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
