CVE-2004-0567

Summary: CVE-2004-0567 refers to a buffer/_name validation vulnerability in Windows WINS that can allow remote code execution or denial of service via specially crafted WINS packets. Affected products/versions (as stated): Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Ser...

CVE-2004-0567

The Windows Internet Naming Service WINS in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a...

MS Windows 2000 WINS Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits ================================================== MS Windows 2000 WINS Remote Code Execution Exploit ================================================== // / ZUCWins 0.1 - Wins 2000 remote root exploit / / Exploit by: zuc / / works on Windo...

Microsoft Windows Server 2000 - WINS Remote Code Execution

// / ZUCWins 0.1 - Wins 2000 remote root exploit / / Exploit by: zuc / / works on Windows 2000 SP3/SP4 probably every language / // include include include include include include include include include include include include include include include include char shellcode =...

Microsoft Windows Server 2000 - WINS Remote Code Execution

Microsoft Windows Server 2000 - WINS Remote Code Execution // / ZUCWins 0.1 - Wins 2000 remote root exploit / / Exploit by: zuc / / works on Windows 2000 SP3/SP4 probably every language / // include include include include include include include include include include include include include...

Microsoft Windows Internet Naming Service (WINS) contains a buffer overflow

Overview A buffer overflow in the WINS service may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description The Microsoft WINS service maps IP addresses to NETBIOS computer names.The WINS protocol contains a vulnerability that may allow a remote attack...

Microsoft WINS server memory corruption

Bug in replication protocol handling allows code execution...

MS04-035: WINS Code Execution (870763) (uncredentialed check)

The remote Windows Internet Naming Service WINS is vulnerable to a flaw that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker needs to send a specially crafted packet on port 42 of the remote host. C Tenable Network Security, Inc...

Microsoft Security Bulletin MS04-045 Vulnerability in WINS Could Allow Remote Code Execution (870763)

Microsoft Security Bulletin MS04-045 Vulnerability in WINS Could Allow Remote Code Execution 870763 Issued: December 14, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Internet Naming Service WINS Impact of Vulnerability: Remote Code Execution Maximum...

MS04-045: WINS Code Execution (870763)

The remote Windows Internet Naming Service WINS server is prone to a heap overflow attack that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a specially crafted packet to port 42 of the remote host. C Tenable Network Security,...

Microsoft Windows WINS Name Value Handling Remote Buffer Overflow Vulnerability

Description The WINS server contains a buffer-overflow vulnerability that can allow attackers to corrupt WINS process memory. The issue occurs because the software fails to perform sufficient boundary checks on computer 'name' data that is handled during a WINS transaction. Ultimately, a WINS...

MS04-045 Microsoft WINS Service Memory Overwrite

This module exploits an arbitrary memory write flaw in the WINS service. This exploit has been tested against Windows 2000 only. Module Options msf use exploit/windows/wins/ms04/045wins msf undefined045wins show actions ...actions... msf undefined045wins set ACTION msf undefined045wins show optio...

MS04-006: WINS Server Remote Overflow (830352) (uncredentialed check)

The remote Windows Internet Naming Service WINS is affected by a vulnerability that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a specially crafted packet with improperly advertised lengths. C Tenable Network Security, Inc...

CVE-2004-1080

The WINS service wins.exe on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the...

CVE-2004-1080

Summary: CVE-2004-1080 describes a remote memory overwrite in the Windows WINS service (wins.exe) via a crafted WINS replication packet sent to TCP port 42, which could allow arbitrary code execution. Affected products: Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003...

Microsoft WINS Replication Attack (CVE-2004-1080)

...

[NT] WINS Replication Remote Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Microsoft Windows Internet Naming Service (WINS) replication protocol contains a heap-based buffer overflow

Overview A buffer overflow vulnerability in the Microsoft Windows Internet Naming Service WINS replication protocol may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description The Microsoft WINS service maps IP addresses to NETBIOS computer names. WIN...

CVE-2003-0825

CVE-2003-0825 concerns the Windows Internet Naming Service (WINS) in Windows NT/2000/Server 2003 families, where malformed packets with improper lengths bypass WINS’ length validation. The result is a remote denial of service on Windows Server 2003 and, for older platforms, potential denial of se...

CVE-2003-0825

The Windows Internet Naming Service WINS for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code...