Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2001-1184: Denicomp Winsock RSHD/NT can be forced to overload CPU

CVE-2001-1184 · published 24 years ago

Summary

The Winsock RSHD/NT service (wrshdsp.exe) on versions up to 2.21.00 can be triggered by a remote user sending specially crafted port numbers, causing the program to consume excessive processor time and become unresponsive. This may disrupt any applications that rely on the service. Update to the latest version from Denicomp or apply any available patches, and consider restricting network access to the service until it is fixed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
denicomp	winsock_rshd_nt	2.20 2.21 `cpe:2.3:a:denicomp:winsock_rshd_nt:2.20:::::::*`

Original advisory text

wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) in 2.20.00 and earlier, an invalid port number such as a negative number, which causes a connection attempt to that port and all ports below 1024, and (2) in 2.21.00, a port number of 1024.

References

http://online.securityfocus.com/archive/1/245405 Exploit
http://www.denicomp.com/rshdnt.htm
http://www.iss.net/security_center/static/7694.php Vendor Advisory
http://www.securityfocus.com/archive/1/244580 Exploit
http://www.securityfocus.com/bid/3659 Exploit Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker partial control

Severity

5.0 Medium

Exploitation

4% chance of attack within 30 days

Timeline

Published8 Dec 2001

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2001-1184 · NVD

CVE-2001-1184 · MITRE

Track software like this

Free during beta