Lucene search

[email protected]CVE-2003-0825

HistoryMar 03, 2004 - 5:00 a.m.

CVE-2003-0825

2004-03-0305:00:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2003-0825

windows

wins

server 2003

server 2000

denial of service

arbitrary code

nvd

7.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.967 High

EPSS

Percentile

99.6%

JSON

The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.

CPENameOperatorVersion
microsoft:windows_ntmicrosoft windows nteq4.0
microsoft:windows_2003_servermicrosoft windows 2003 servereqweb
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_64-bit
microsoft:windows_2000microsoft windows 2000eq*
microsoft:windows_2003_servermicrosoft windows 2003 servereq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqr2
microsoft:windows_2003_servermicrosoft windows 2003 servereqstandard

CPE	Name	Operator	Version
microsoft:windows_nt	microsoft windows nt	eq	4.0
microsoft:windows_2003_server	microsoft windows 2003 server	eq	web
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_64-bit
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	r2
microsoft:windows_2003_server	microsoft windows 2003 server	eq	standard

References

www.ciac.org/ciac/bulletins/o-077.shtml

www.kb.cert.org/vuls/id/445214

www.osvdb.org/3903

www.securityfocus.com/bid/9624

docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-006

exchange.xforce.ibmcloud.com/vulnerabilities/15037

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A704

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A800

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A801

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A802

7.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.967 High

EPSS

Percentile

99.6%

JSON

Related for CVE-2003-0825

nessus2 cert1 checkpoint_advisories1 cvelist1 securityvulns1