Denial of Service When Using Xenroll to Create Files or Write to the Registry

ID: Q242366

The information in this article applies to:

Microsoft Windows NT Workstation version 4.0
Microsoft Windows NT Server version 4.0
Microsoft Windows NT Server, Enterprise Edition version 4.0
Microsoft Internet Explorer versions 4.0, 4.01, 4.01 Service Pack 1, 4.01 Service Pack 2, 5 for Windows NT 4.0

SYMPTOMS

You can use Xenroll to create files with any name or write to the registry without notifying users. If you use this ActiveX control for either purpose, you may receive a "denial of service" error message if you use the control multiple times.

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows NT 4.0. For additional information, please see the following article in the Microsoft Knowledge Base:

Q152734 How to Obtain the Latest Windows NT 4.0 Service Pack

Windows NT 4.0 Service Pack 6 prompts users before writing files and restricts the number of registry entries that are created.

STATUS

Microsoft has confirmed this to be a problem in Windows NT 4.0. This problem was first corrected in Windows NT 4.0 Service Pack 6.

MORE INFORMATION

The purpose of the Xenroll control is to create files and registry entries. Because multiple organizations use this control, you cannot simply disable the control.

The Xenroll control cannot overwrite files without user intervention.

Additional query words:

Keywords : kbbug4.00 kbfix4.00 NT4SP6Fix
Version : WINDOWS:4.0,4.01,4.01 Service Pack 1,4.01 Service Pack 2,5; winnt:4.0
Platform : WINDOWS winnt
Issue type : kbbug