PT-2004-1929 · Microsoft · Windows Server 2003+4

Publicado 2004-12-15 · Atualizado 2019-04-30 · CVE-2004-0893

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Windows Kernel versions for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003

Description: The issue is related to the Local Procedure Call (LPC) interface of the Windows Kernel, which does not properly validate the lengths of messages sent to the LPC port. This allows local users to gain privileges.

Recommendations: For Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2004-0893

Produtos afetados

Windows 2000

Windows Kernel

Windows Nt 4.0

Windows Server 2003

Windows Xp

Referências · 11

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1581 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1886 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1561 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18339 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4021 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0893 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1321 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-044 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4458 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2008 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A450 · Nota