A DoS attack can be carried out on Windows 2000 machines running IKE (Internet Key Exchange) by flooding IKE with UDP packets. This can cause the machine to lock up and use all available CPU.
Credit:
The information has been provided by c0redump.
Exploit:
Connect to UDP port 500 (IKE) of the Win2k box and start sending UDP packets of more than 800 bytes continuously. The box will eventually stop responding and services will be denied due to 99% CPU usage from the packets.
Solution:
Firewall UDP port 500 off whenever a system does not require IPSec.
.jpg)
