PT-2003-2061 · Microsoft · Windows 2000

Published 2003-12-31 · Updated 2019-04-30 · CVE-2003-1106

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 versions prior to SP4

Description The issue concerns a denial of service that can be triggered by sending an e-mail message with a malformed time stamp in the FILETIME attribute to the SMTP service. This can cause the service to crash or hang.

Recommendations For Microsoft Windows 2000 versions prior to SP4, apply Service Pack 4 to resolve the issue.

Fix

Related Identifiers

CVE-2003-1106

Affected Products

Windows 2000

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2003-1106 · Security Note
• http://support.microsoft.com/default.aspx?kbid=330716 · Vendor Advisory
• http://securityfocus.com/bid/8195 · Note
• http://kb.cert.org/vuls/id/155252 · Note