NT/Win2K Denial of Service via Invalid SMB Field

 
Denial of Service with Invalid SMB Field
Reported June 5 by Luke Kenneth Casson Leighton

DESCRIPTION

If a DCE/RPC request is encapsulated inside an SMB request along with an invalid data length field the system will crash where a reboot is necessary to restore functionality.

VENDOR RESPONSE

Microsoft is aware of this matter, however no response was known at the time of this writing.

CREDITS
Discovered and reported by Luke Kenneth Casson Leighton