The following is a Security  Bulletin from the Microsoft Product Security
Notification Service.


Please do not  reply to this message,  as it was sent  from an unattended
mailbox.
                    ********************************


- ----------------------------------------------------------------------
Title:      Malformed RPC Request Can Cause Service Failure
Date:       26 July 2001
Software:   Exchange Server 5.5, Exchange Server 2000,
            SQL Server 7.0, SQL Server 2000, Windows NT 4.0,
            Windows 2000
Impact:     Denial of service
Bulletin:   MS01-041


Microsoft encourages customers to review the Security Bulletin at:
http://www.microsoft.com/technet/security/bulletin/MS01-041.asp.
- ----------------------------------------------------------------------


Issue:
======
Several of the RPC servers associated with system services
in Microsoft Exchange, SQL Server, Windows NT 4.0 and Windows 2000 do not
adequately validate inputs, and in some cases will accept invalid inputs
that prevent normal processing. The specific input values at issue here
vary from RPC server to RPC server.


An attacker who sent such inputs to an affected RPC server could disrupt
its service. The precise type of disruption would depend on the specific
service, but could range in effect from minor (e.g., the service
temporarily hanging) to major (e.g., the service failing in a way that
would require the entire system to be restarted).


Mitigating Factors:
====================
 - Proper firewalling would help minimize an affected system's
   exposure to attack by Internet-based users. In general, a
   firewall should block access to all RPC services except
   those that are specifically intended for use by untrusted users.


Patch Availability:
===================
 - A patch is available to fix this vulnerability. Please read the
   Security Bulletin
   http://www.microsoft.com/technet/security/bulletin/ms01-041.asp
   for information on obtaining this patch.


Acknowledgment:
===============
 - Bindview's Razor Team (http://razor.bindview.com)


- ---------------------------------------------------------------------


THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS
IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES,
EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION
OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT,
INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL
DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED
OF THE POSSIBILITY OF SUCH DAMAGES.  SOME STATES DO NOT ALLOW THE
EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL
DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.




   ******************************************************************* You
have received this e-mail bulletin as a result of your registration to the
Microsoft Product Security Notification Service.  You may unsubscribe from
this e-mail notification service at any time by sending an e-mail to
MICROSOFT_SECURITY-SIGNOFF-REQUEST@ANNOUNCE.MICROSOFT.COM The subject line
and message body are not used in processing the request, and can be
anything you like.


To verify the digital signature on this bulletin, please download our PGP
key at http://www.microsoft.com/technet/security/notify.asp.


For more information on the Microsoft Security Notification Service please
visit http://www.microsoft.com/technet/security/notify.asp.  For
security-related information about Microsoft products, please visit the
Microsoft Security Advisor web site at http://www.microsoft.com/security.


- ------------ Output from pgp ------------
Signature by unknown keyid: 0x3103F52B





-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
Charset: noconv


iQCVAwUBO2qanekli63F4U8VAQEFXwP/YYN25ZVt98EHlbuoXDXK9V51FQYk7WfO
EtxcYlK9AzXp8EcZP2roN/pjj7rxzTgDqYd6vND88iWBEMxVVwoYQVGw2cdbTt3T
mwAP9twOLFYfNF/JVBuyUGcX1i82C5cgcFwuKos+46JXqQEkCNGuZosBF5hJJcg2
NMM7ygxJrNg=
=q0Fg
-----END PGP SIGNATURE-----