vulnwire
5.0med

CVE-2005-19792 exploits

Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exi…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
32.8%
percentile 98%
Public exploits
2
Exploit-DB

Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit) via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol (TIP) functionality.

Exploit prediction (EPSS)

32.82% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

  • EDB-26341 Microsoft Windows XP/2000/2003 - MSDTC TIP Denial of Service (MS05-051) · dos · 2005-10-11
  • EDB-1352 Microsoft Windows - DTC Remote (MS05-051) (2) · remote · 2005-12-01

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:N/A:P

References

  • secunia.com /advisories/17161 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1134 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1283 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1513 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2005/ms05-051 · vendor-advisory, x_refsource_MS, x_transferred
  • securitytracker.com /id?1015037 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2005-214.pdf · x_refsource_CONFIRM, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1550 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1338 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • secunia.com /advisories/17223 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • idefense.com /application/poi/display?id=320&type=vulnerabilities · third-party-advisory, x_refsource_IDEFENSE, x_transferred
  • secunia.com /advisories/17172 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A686 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • secunia.com /advisories/17509 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/15058 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.