PT-2004-1371 · Microsoft · Windows Xp+4

John Heasman · Published 2004-10-16 · Updated 2018-10-12 · CVE-2004-0206

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version, including Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003

Description The issue allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application. This is possibly due to an "unchecked buffer," which may be related to a buffer overflow.

Recommendations For Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2004-0206

Affected Products

Windows 2000

Windows 98

Windows Nt 4.0

Windows Server 2003

Windows Xp

References · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms04_031_netdde.rb · Exploit
• 🔥 https://exploit-db.com/exploits/734 · Exploit
• 🔥 https://exploit-db.com/exploits/16371 · Exploit
• http://kb.cert.org/vuls/id/640488 · Patch
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0206 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6788 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5074 · Note
• http://securityfocus.com/bid/11372 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2394 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4592 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16556 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1852 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3242 · Note
• http://secunia.com/advisories/12803 · Note