MS Distributed Transaction Coordinator (msdtc) Security Issues

[Ronish Mehta <sf_mail_sbm () yahoo com>]

Dear list,
We have a Win 2K web server, and there is a
requirement for enabling MSDTC on the machine

However we want to evaluate the security implications
before enabling this service

I have tried to look for MSDTC vulnerabilities, and
found 1 DOS vulnerability dated in 2002, a patch is
already available for same

Are there security issues with MSDTC? 

Your views and suggestions are the most welcome

Thanks,
Ronish


                
__________________________________
Do you Yahoo!?
New and Improved Yahoo! Mail - Send 10MB messages!
http://promotions.yahoo.com/new_mail 

---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------