A vulnerability was reported in Ssdpsrv, a component of the Microsoft Windows ME Universal Plug and Play (UPnP) implementation. A remote user may be able to cause the Ssdpsrv service to crash. It is reported that a remote user can connect to the Ssdpsrv port and cause the service to crash. The service must be manually restarted or the server must be rebooted in order for the service to return to normal operation. Port 5000 seems to be the one used for this denial of service attack.

No solution was available from Microsoft at this time.