Description
Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit) via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol (TIP) functionality.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 2
- Microsoft Windows - DTC Remote (MS05-051) (2) EDB-1352 · remote · Dec 1, 2005 · verified
- Microsoft Windows XP/2000/2003 - MSDTC TIP Denial of Service (MS05-051) EDB-26341 · dos · Oct 11, 2005 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 17161 third-party-advisory
- oval:org.mitre.oval:def:1134 vdb-entry signature
- oval:org.mitre.oval:def:1283 vdb-entry signature
- oval:org.mitre.oval:def:1513 vdb-entry signature
- MS05-051 vendor-advisory
- 1015037 vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf
- oval:org.mitre.oval:def:1550 vdb-entry signature
- oval:org.mitre.oval:def:1338 vdb-entry signature
- 17223 third-party-advisory
- 20051011 Microsoft Distributed Transaction Controller TIP DoS Vulnerability third-party-advisory
- 17172 third-party-advisory
- oval:org.mitre.oval:def:686 vdb-entry signature
- 17509 third-party-advisory
- 15058 vdb-entry