Description
Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service hang) via a crafted Transaction Internet Protocol (TIP) message that causes DTC to repeatedly connect to a target IP and port number after an error occurs, aka the "Distributed TIP Vulnerability."
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Microsoft Windows - DTC Remote (MS05-051) (2) EDB-1352 · remote · Dec 1, 2005 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 17161 third-party-advisory
- oval:org.mitre.oval:def:1253 vdb-entry signature
- MS05-051 vendor-advisory
- 1015037 vdb-entry
- oval:org.mitre.oval:def:1413 vdb-entry signature
- 20051011 Microsoft Distributed Transaction Controller Packet Relay DoS Vulnerability third-party-advisory
- oval:org.mitre.oval:def:1136 vdb-entry signature
- http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf
- 17223 third-party-advisory
- oval:org.mitre.oval:def:1203 vdb-entry signature
- 17172 third-party-advisory
- oval:org.mitre.oval:def:1325 vdb-entry signature
- 17509 third-party-advisory
- oval:org.mitre.oval:def:1182 vdb-entry signature
- 15059 vdb-entry