PT-2004-2056 · Microsoft · Windows 2000 Server+2

Kostya Kortchinsky · Published 2004-12-01 · Updated 2019-04-30 · CVE-2004-1080

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Windows NT Server version 4.0 Microsoft Windows 2000 Server Microsoft Windows Server 2003

Description: The issue allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42.

Recommendations: For Microsoft Windows NT Server version 4.0, apply the necessary patch to fix the issue. For Microsoft Windows 2000 Server, apply the necessary patch to fix the issue. For Microsoft Windows Server 2003, apply the necessary patch to fix the issue.

Exploit

Fix

Related Identifiers

CVE-2004-1080

Affected Products

Windows 2000 Server

Windows Nt Server

Windows Server 2003

References · 22

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/wins/ms04_045_wins.rb · Exploit
• 🔥 https://exploit-db.com/exploits/909 · Exploit
• 🔥 https://exploit-db.com/exploits/16359 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045 · Vendor Advisory
• http://securityfocus.com/bid/11763 · Vendor Advisory
• http://kb.cert.org/vuls/id/145134 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-1080 · Security Note
• http://support.microsoft.com/kb/890710 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=110150370506704&w=2 · Note
• http://ciac.org/ciac/bulletins/p-054.shtml · Note
• http://immunitysec.com/downloads/instantanea.pdf · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3677 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2541 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2734 · Note
• http://xforce.iss.net/xforce/alerts/id/184 · Note