Knowledge Base

XADM: SRS May Stop Responding Because of an RPC Denial of Service Attack

Article ID: 298611

Article Last Modified on 2/27/2007

APPLIES TO

Microsoft Exchange 2000 Server Standard Edition

This article was previously published under Q298611

SYMPTOMS

The Exchange Site Replication Service (MSExchangeSRS) may stop responding during a remote procedure call (RPC) denial of service attack.

RESOLUTION

To resolve this problem, obtain the latest service pack for Microsoft Exchange 2000 Server. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

301378 XGEN: How to Obtain the Latest Exchange 2000 Server Service Pack

The English version of this fix should have the following file attributes or later:

Component: Directory

File name	Version
Srsmain.exe	6.0.4419.06

STATUS

Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server. This problem was first corrected in Microsoft Exchange 2000 Server Service Pack 1.

MORE INFORMATION

After you apply this fix, the following error message may be logged in the Application event log while the server is under the RPC denial of service attack:

Event Type: Error
Event Source: MSExchangeSRS
Event Category: Security
Event ID: 1052
Date: 11/01/2000
Time: 8:45:00 AM
User: N/A
Computer: server_name
Description:
Error 1765 occurred while checking access rights. Verify that the Windows Server software is installed correctly.

For more information, click http://search.support.microsoft.com/search/?adv=1.

Additional query words: crash DoS exch2kp2w

Keywords: kbbug kberrmsg kbexchange2000presp1fix kbfix KB298611

Microsoft KB Archive/298611

Contents