PT-2004-1156 · Microsoft · Windows 2000+7

Published 2004-04-16 · Updated 2018-10-12 · CVE-2003-0719

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows NT 4.0 SP6a Microsoft Windows 2000 SP2 through SP4 Microsoft Windows XP SP1 Microsoft Windows Server 2003 Microsoft NetMeeting Microsoft Windows 98 Microsoft Windows ME

Description The issue is related to a buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library. This allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.

Recommendations For Microsoft Windows NT 4.0 SP6a, apply the necessary patch to fix the buffer overflow issue. For Microsoft Windows 2000 SP2 through SP4, apply the necessary patch to fix the buffer overflow issue. For Microsoft Windows XP SP1, apply the necessary patch to fix the buffer overflow issue. For Microsoft Windows Server 2003, apply the necessary patch to fix the buffer overflow issue. For Microsoft NetMeeting, apply the necessary patch to fix the buffer overflow issue. For Microsoft Windows 98 and Windows ME, apply the necessary patch to fix the buffer overflow issue.

Exploit

Fix

Related Identifiers

CVE-2003-0719

Affected Products

Ssl Library

Netmeeting

Windows 2000

Windows 98

Windows Me

Windows Nt 4.0

Windows Server 2003

Windows Xp

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ssl/ms04_011_pct.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16334 · Exploit
• 🔥 https://exploit-db.com/exploits/275 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0719 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 · Vendor Advisory
• http://xforce.iss.net/xforce/alerts/id/168 · Vendor Advisory
• http://securityfocus.com/archive/1/361836 · Vendor Advisory
• http://kb.cert.org/vuls/id/586540 · Patch
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A889 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1093 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A903 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A951 · Note
• http://us-cert.gov/cas/techalerts/TA04-104A.html · Note