PT-2004-1315 · Microsoft · Windows Server 2003+4

Published 2004-04-16 · Updated 2018-10-12 · CVE-2004-0124

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows NT 4.0 Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003

Description The issue allows remote attackers to cause network communications via an "alter context" call that contains additional data, also known as the "Object Identity Vulnerability." This affects the DCOM RPC interface.

Recommendations For Microsoft Windows NT 4.0, apply the available patch to fix the issue. For Microsoft Windows 2000, apply the available patch to fix the issue. For Microsoft Windows XP, apply the available patch to fix the issue. For Microsoft Windows Server 2003, apply the available patch to fix the issue.

Fix

Related Identifiers

CVE-2004-0124

Affected Products

Dcom Rpc

Windows 2000

Windows Nt 4.0

Windows Server 2003

Windows Xp

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2004-0124 · Security Note
• http://kb.cert.org/vuls/id/212892 · Patch
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012 · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA04-104A.html · Note
• http://ciac.org/ciac/bulletins/o-115.shtml · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1041 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15711 · Note
• http://secunia.com/advisories/11065 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1066 · Note
• http://securityfocus.com/bid/10121 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1072 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1062 · Note