Denial of Service in Microsoft Group Policy

VERSION AFFECTED

• Microsoft Windows 2000

DESCRIPTION
A Denial of Service (DoS) condition exists in Microsoft Windows 2000 Group Policy. Win2K's moderate type file-locking mechanism might let an application put an exclusive lock on a file, making that file unavailable to another application, even if that application doesn't attempt to lock the file. The OS doesn't check file permissions before locking occurs, so even unprivileged users can lock files.

VENDOR RESPONSE

The vendor, Microsoft, has released MS02-016, to fix this issue.

CREDIT
Discovered by 3APA3A