CVE-2002-2077

CVE-2002-2077 describes a memory clearing vulnerability in the DCOM client of Microsoft Windows 2000 prior to Service Pack 3. This flaw allows remote attackers to potentially obtain sensitive information by sniffing network traffic during an "alter context" request, as memory is not properly cleared beforehand. With a CVSS score of 5.0 (medium severity), the attack requires no authentication and has a low attack complexity, leading to a potential compromise of confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.