high7.5Public exploit code
CVE-2004-0567
The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 200…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows Server 2000 - WINS Remote Code Execution2004-12-31 · remote · windows · Verified
Impact
The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a denial of service (server crash), which results in an "unchecked buffer" and possibly triggers a buffer overflow, aka the "Name Validation Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows 2003 Server | Versions 64-bit, r2 |
| Microsoft | Windows Nt | Version 4.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/13466
- http://securitytracker.com/id?1012517
- http://www.ciac.org/ciac/bulletins/p-054.shtml
- http://www.kb.cert.org/vuls/id/378160
- http://www.osvdb.org/12370
- http://www.securityfocus.com/bid/11922
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18259
- http://secunia.com/advisories/13466
- http://securitytracker.com/id?1012517
- http://www.ciac.org/ciac/bulletins/p-054.shtml
- http://www.kb.cert.org/vuls/id/378160
- http://www.osvdb.org/12370
- http://www.securityfocus.com/bid/11922
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18259