main

Windows NT 4.0 Security Patch: Malformed Request to RPC

Daniel Fleshbourne   on 18 March 2003 - 12:52 · 3 comments & 648 views

Advertisement (Why?)
Quick Info
File Name: Q305399i.exe - Download Size: 457 KB - Date Published: 3/17/2003 - Version: Q305399

Overview
This update resolves the "Malformed RPC Packet" security vulnerability in computers running Windows NTŪ 4.0 and is discussed in Microsoft Security Bulletin MS01-048. Download now to prevent a malicious user from launching a denial of service attack using the Remote Procedure Call (RPC) client.

This vulnerability exists because there is an error in the way the endpoint mapper (used by the RPC service to determine which remote port to use) processes queries. If a malicious user sends a malformed RPC query to an affected Windows NT 4.0 computer, it can cause the server to stop responding to requests

System Requirements
Microsoft Windows NT4.0 Workstation
Microsoft Windows NT 4.0 Server
Microsoft Windows NT4.0 Server, Enterprise Edition

Download: Windows NT 4.0 Security Patch: Malformed Request to RPC Endpoint Mapper can Cause RPC Service to Fail
View: Microsoft Security Bulletin MS01-048
News source: In-House


  • Removed 'CD-authentication failed' messages on clients.
  • Fixed bug in weapon system causing network overload (unable to spawn, unable to change weapon).
  • Possible to specify alternative network config files when starting server. See MP-README.txt for details.
  • Fixed a spawn bug preventing players from sending new spawn requests if they were initially denied spawning.
  • Fixed problem with being thrown out from the terrain when sliding.
  • Fixed limiting of view-angle when lying down.
  • Fixed bug that left one player with no weapon when 2 players simultaneously tried to pick up a weapon.
  • Fixed Mission Complete credit, always showed server local player in listen mode.
  • Fixed so dead players don't stand up where they died if respawning while they are in the death sequence.
  • Fixed so weapons don't get stuck some times with autofire after dead.
  • Fixed so bomb don't explode many times with laggy network.
  • Fixed so players can't fire while disarming bomb.
  • Removed player-corpses' knife-slashes which killed other players.
  • Added the display of servername to score-screen
  • Enabled players who join after Obj1 is completed to disarm planted bomb.

Post a comment · Send to friend Comments · There are 3 additional comments
(1 reply) #1 ThunderRiver on 18 Mar 2003 - 13:37
Thought Microsoft stopped supporting NT4
#1.1 Jason on 18 Mar 2003 - 14:14
Nope another year of security fixes, many companies still use it.
#2 wd40 on 18 Mar 2003 - 18:08
"Originally posted: September 10, 2001"... Date updated file is posted 3/17/2003...

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)