PT-2004-1929 · Microsoft · Windows Server 2003+4

Published 2004-12-15 · Updated 2019-04-30 · CVE-2004-0893

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Windows Kernel versions for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003

Description: The issue is related to the Local Procedure Call (LPC) interface of the Windows Kernel, which does not properly validate the lengths of messages sent to the LPC port. This allows local users to gain privileges.

Recommendations: For Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-0893

Affected Products

Windows 2000

Windows Kernel

Windows Nt 4.0

Windows Server 2003

Windows Xp

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2004-0893 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-044 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1581 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1886 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1561 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18339 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4021 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1321 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4458 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2008 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A450 · Note