XADM: SRS May Stop Responding Because of an RPC Denial of Service Attack (298611)



The information in this article applies to:

  • Microsoft Exchange 2000 Server

This article was previously published under Q298611

SYMPTOMS

The Exchange Site Replication Service (MSExchangeSRS) may stop responding during a remote procedure call (RPC) denial of service attack.

RESOLUTION

To resolve this problem, obtain the latest service pack for Microsoft Exchange 2000 Server. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

301378 XGEN: How to Obtain the Latest Exchange 2000 Server Service Pack

The English version of this fix should have the following file attributes or later:

Component: Directory

File nameVersion
Srsmain.exe6.0.4419.06

STATUS

Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server. This problem was first corrected in Microsoft Exchange 2000 Server Service Pack 1.

MORE INFORMATION

After you apply this fix, the following error message may be logged in the Application event log while the server is under the RPC denial of service attack:
Event Type: Error
Event Source: MSExchangeSRS
Event Category: Security
Event ID: 1052
Date: 11/01/2000
Time: 8:45:00 AM
User: N/A
Computer: server_name
Description:
Error 1765 occurred while checking access rights. Verify that the Windows Server software is installed correctly.

For more information, click http://search.support.microsoft.com/search/?adv=1.

Modification Type:MajorLast Reviewed:7/17/2006
Keywords:kbbug kberrmsg kbExchange2000preSP1fix kbfix KB298611