PT-2004-1162 · Microsoft · Windows Nt Server 4.0+4

Published 2004-04-16 · Updated 2018-10-12 · CVE-2003-0807

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows NT Server 4.0 Microsoft Windows NT 4.0 Terminal Server Edition Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003

Description A buffer overflow issue exists in the COM Internet Services and in the RPC over HTTP Proxy components, allowing remote attackers to cause a denial of service via a crafted request.

Recommendations For Microsoft Windows NT Server 4.0, apply the necessary patch to fix the buffer overflow issue. For Microsoft Windows NT 4.0 Terminal Server Edition, apply the necessary patch to fix the buffer overflow issue. For Microsoft Windows 2000, apply the necessary patch to fix the buffer overflow issue. For Microsoft Windows XP, apply the necessary patch to fix the buffer overflow issue. For Microsoft Windows Server 2003, apply the necessary patch to fix the buffer overflow issue.

Fix

Related Identifiers

CVE-2003-0807

Affected Products

Windows 2000

Windows Nt 4.0 Terminal Server Edition

Windows Nt Server 4.0

Windows Server 2003

Windows Xp

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2003-0807 · Security Note
• http://kb.cert.org/vuls/id/698564 · Patch
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012 · Vendor Advisory
• http://securitytracker.com/alerts/2004/Apr/1009762.html · Note
• http://securityfocus.com/bid/10123 · Note
• http://ciac.org/ciac/bulletins/o-115.shtml · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15709 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A969 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1030 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A995 · Note
• http://us-cert.gov/cas/techalerts/TA04-104A.html · Note