PT-2004-1315 · Microsoft · Windows Server 2003+4

Publicado 2004-04-16 · Atualizado 2018-10-12 · CVE-2004-0124

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows NT 4.0 Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003

Description The issue allows remote attackers to cause network communications via an "alter context" call that contains additional data, also known as the "Object Identity Vulnerability." This affects the DCOM RPC interface.

Recommendations For Microsoft Windows NT 4.0, apply the available patch to fix the issue. For Microsoft Windows 2000, apply the available patch to fix the issue. For Microsoft Windows XP, apply the available patch to fix the issue. For Microsoft Windows Server 2003, apply the available patch to fix the issue.

Correção

Identificadores relacionados

CVE-2004-0124

Produtos afetados

Dcom Rpc

Windows 2000

Windows Nt 4.0

Windows Server 2003

Windows Xp

Referências · 12

• https://nvd.nist.gov/vuln/detail/CVE-2004-0124 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA04-104A.html · Nota
• http://ciac.org/ciac/bulletins/o-115.shtml · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1041 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15711 · Nota
• http://secunia.com/advisories/11065 · Nota
• http://kb.cert.org/vuls/id/212892 · Correção
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1066 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012 · Aviso do Fabricante
• http://securityfocus.com/bid/10121 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1072 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1062 · Nota