PT-2004-1170 · Microsoft · Windows 2000 Server+3
Publicado
2004-03-03
·
Atualizado
2019-04-30
·
CVE-2003-0825
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows Server 2003
Microsoft Windows NT (affected versions not specified)
Microsoft Windows Server 2000 (affected versions not specified)
Description
The issue is related to the Windows Internet Naming Service (WINS) not properly validating the length of certain packets. This can allow attackers to cause a denial of service and possibly execute arbitrary code.
Recommendations
For Microsoft Windows Server 2003, update to a version that properly validates packet lengths to prevent exploitation.
For Microsoft Windows NT and Server 2000, since the affected versions are not specified, ensure that all security updates are applied and consider disabling WINS if it is not necessary for operations.
At the moment, there is no information about a newer version that contains a fix for this vulnerability for some of the affected products.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Windows Internet Naming Service
Windows Nt
Windows 2000 Server
Windows Server 2003