Microsoft Windows Internet Naming Service (WINS) fails to properly validate the length of specially crafted packets

Overview Microsoft Windows Internet Naming Service WINS fails to properly validate the length of specially crafted packets which could allow an unauthenticated, remote attacker to cause a denial-of-service condition. Description The Windows Internet Naming Service WINS maps IP addresses to NETBIO...

Microsoft Security Bulletin MS04-006

Microsoft Security Bulletin MS04-006 Vulnerability in the Windows Internet Naming Service WINS Could Allow Code Execution 830352 Issued: February 10, 2004 Version Number: 1.0 Summary Who should read this document: Customers who are using Microsoft® Windows Internet Naming Service WINS® Impact of...

WINS buffer overflow

Buffer overflow on network packet parsing...

MS04-006: WINS Server Remote Overflow (830352)

The remote Windows Internet Naming Service WINS is vulnerable to a flaw that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a specially crafted packet with improperly advertised lengths. C Tenable Network Security, Inc...

CVE-1999-1361

Windows NT 3.51 and 4.0 running WINS are affected by CVE-1999-1361, where a remote attacker can cause a denial of service by sending a flood of malformed packets. The issue may exhaust resources, degrade performance, and fill event logs with errors. The available sources describe the vulnerabilit...

CVE-1999-1361

Windows NT 3.51 and 4.0 running WINS Windows Internet Name Service allows remote attackers to cause a denial of service resource exhaustion via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages...

CVE-1999-0294

All records in a WINS database can be deleted through SNMP for a denial of service...

CVE-1999-0288

The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service process termination via invalid UDP frames to port 137 NETBIOS Name Service, as demonstrated via a flood of random packets...

CVE-1999-0288

The CVE-1999-0288 issue affects the WINS server in Microsoft Windows NT 4.0 prior to SP4, where remote attackers can terminate the WINS process by sending invalid UDP frames to NETBIOS Name Service port 137. Exploitation is described as a flood of random UDP packets causing a denial of service. T...

CVE-1999-0294

All records in a WINS database can be deleted through SNMP, causing a denial of service. The connected Red Hat/PT-Security entries confirm the issue but do not provide concrete affected versions or a fix. No remediation details are listed in the provided documents; monitor for updates.

Microsoft Windows NT WINS Service Malformed Data DoS

We could crash the remote WINS server by sending it a lot of UDP packets containing random data. If you do not use WINS, then deactivate this server. An attacker may use this flaw to bring down your NT network. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10315;...

nt.pdc.dos.txt

Date: Fri, 4 Jun 1999 14:01:01 -0700 Reply-To: Carl Byington Sender: Windows NT BugTraq Mailing List From: Carl Byington Subject: denial of service attack against NT PDC from Win95 workstation -----BEGIN PGP SIGNED MESSAGE----- I searched the archives, but did not find this one discussed. We have...

Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3 - Denial of Service Duplicate Hostname

source: https://www.securityfocus.com/bid/298/info NT Workstations and Servers must have unique hostnames if they reside on the same network. Should an NT host attempt to use an existing hostname, the second server with the new duplicate name will fail to start its workstation and server services...

CVE-1999-0288

The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service process termination via invalid UDP frames to port 137 NETBIOS Name Service, as demonstrated via a flood of random packets...

CVE-1999-1361

Windows NT 3.51 and 4.0 running WINS Windows Internet Name Service allows remote attackers to cause a denial of service resource exhaustion via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages...

Microsoft Windows NT 4.0 - SNMP-WINS Denial of Service

Microsoft Windows NT 4.0 - SNMP-WINS Denial of Service source: https://www.securityfocus.com/bid/2244/info The Simple Network Management Protocol SNMP provides remote network administration functions. Windows NT provides an optional SNMP implementation. Windows NT networks can use Windows Interne...

Microsoft Windows NT 4.0 - SNMP-WINS Denial of Service

source: https://www.securityfocus.com/bid/2244/info The Simple Network Management Protocol SNMP provides remote network administration functions. Windows NT provides an optional SNMP implementation. Windows NT networks can use Windows Internet Name Service WINS, a DNS-like service, to register...

CVE-1999-0294

All records in a WINS database can be deleted through SNMP for a denial of service...

PT-1997-1122 · Microsoft · Wins

Name of the Vulnerable Software and Affected Versions: WINS affected versions not specified Description: The issue allows all records in a WINS database to be deleted through SNMP, resulting in a denial of service. Recommendations: At the moment, there is no information about a newer version that...

Security Update for Windows Server 2003 (KB870763)

A security issue has been identified in Windows Internet Naming Service WINS that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your WINS Server by installing this update from Microsoft. After you install this item, you may have to...