PT-2004-1931 · Microsoft · Windows Nt 4.0 Terminal Server Edition+1

Kostya Kortchinsky · Published 2004-12-15 · Updated 2018-10-12 · CVE-2004-0899

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Windows NT 4.0 Server and Terminal Server Edition

Description: The issue is related to the DHCP Server service, where it fails to properly validate the length of certain messages when DHCP logging is enabled. This allows remote attackers to cause a denial of service, resulting in an application crash, by sending a malformed DHCP message.

Recommendations: For Microsoft Windows NT 4.0 Server and Terminal Server Edition, consider disabling DHCP logging as a temporary workaround to minimize the risk of exploitation. Restrict access to the DHCP Server service to prevent remote attackers from sending malformed messages.

Fix

Related Identifiers

CVE-2004-0899

Affected Products

Windows Nt 4.0 Server

Windows Nt 4.0 Terminal Server Edition

References · 5

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0899 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4282 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18341 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2280 · Note