Malformed Resource Enumeration Arguments May Cause Named Pipes and Other System Services to Fail

ID: Q246045

The information in this article applies to:

Microsoft Windows NT Server version 4.0
Microsoft Windows NT Workstation version 4.0
Microsoft Windows NT Server, Enterprise Edition version 4.0

SYMPTOMS

Windows NT clients are unable to gain access to shared file resources or make other named pipe connections to a Windows NT-based server or workstation after the following error message is generated by the Dr. Watson utility:

Access violation c0000005 in Services.exe

CAUSE

This behavior occurs because a malformed packet causes Srvsvc.dll to reference an invalid memory location.

RESOLUTION

The following files are available for download from the Microsoft Download Center. Click the file names below to download the files:

x86: Q246045.exe
Alpha: Q246045.exe

For more information about how to download files from the Microsoft Download Center, please visit the Download Center at the following Web address

http://www.microsoft.com/downloads/search.asp

and then click How to use the Microsoft Download Center.

The English-language version of this fix should have the following file attributes or later:


   Date      Time                 Size     File name     Platform
   --------------------------------------------------------------
   11/22/1999 10:59a              146,704  Srvsvc.dll    Alpha
   11/22/1999 10:59a               99,600  Srvsvc.dll    i386

STATUS

Microsoft has confirmed this to be a problem in the Microsoft products listed at the beginning of this article.

MORE INFORMATION

If you suspect that an RFPoison attack has occurred and your Dr. Watson information is consistent with the attack, an analysis of the User.dmp log file may confirm the attack. The User.dmp file is created in the %SystemRoot% folder when Services.exe stops working if the Create Crash Dump File check box is selected in Drwtsn32.exe.

Additional query words: RFPoison

Keywords : kbbug4.00 kbfix4.00
Version : winnt:4.0
Platform : winnt
Issue type : kbbug