Microsoft Windows 2000 Remote Installation Service unknown vulnerability

A vulnerability, which was classified as critical, was found in Microsoft Windows 2000 (Operating System). This affects some unknown functionality of the component Remote Installation Service. Upgrading eliminates this vulnerability. Applying the patch MS06-077 is able to eliminate this problem. The bugfix is ready for download at microsoft.com. The best possible mitigation is suggested to be upgrading to the latest version. A possible mitigation has been published immediately after the disclosure of the vulnerability. Attack attempts may be identified with Snort ID 9638. In this case the pattern |00 02| is used for detection. Furthermore it is possible to detect and prevent this kind of attack with TippingPoint and the filter 4904.