PT-2004-2056 · Microsoft · Windows 2000 Server+2

Kostya Kortchinsky · Publicado 2004-12-01 · Atualizado 2019-04-30 · CVE-2004-1080

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Windows NT Server version 4.0 Microsoft Windows 2000 Server Microsoft Windows Server 2003

Description: The issue allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42.

Recommendations: For Microsoft Windows NT Server version 4.0, apply the necessary patch to fix the issue. For Microsoft Windows 2000 Server, apply the necessary patch to fix the issue. For Microsoft Windows Server 2003, apply the necessary patch to fix the issue.

Exploit

Correção

Identificadores relacionados

CVE-2004-1080

Produtos afetados

Windows 2000 Server

Windows Nt Server

Windows Server 2003

Referências · 22

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/wins/ms04_045_wins.rb · Exploit
• 🔥 https://exploit-db.com/exploits/909 · Exploit
• 🔥 https://exploit-db.com/exploits/16359 · Exploit
• http://marc.info/?l=bugtraq&m=110150370506704&w=2 · Nota
• http://ciac.org/ciac/bulletins/p-054.shtml · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045 · Aviso do Fabricante
• http://securityfocus.com/bid/11763 · Aviso do Fabricante
• http://immunitysec.com/downloads/instantanea.pdf · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3677 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2541 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2734 · Nota
• http://xforce.iss.net/xforce/alerts/id/184 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4372 · Nota
• http://kb.cert.org/vuls/id/145134 · Correção
• http://securitytracker.com/id?1012516 · Nota