Microsoft Windows Negotiate SSP Code Execution (CVE-2004-0119)

A remote code execution vulnerability has been reported in Microsoft Windows Negotiate Security Software Provider SSP interface. The vulnerability is due to a buffer overflow while handling certain network messages. A remote attacker may exploit this vulnerability by sending a specially crafted...

CVE-2004-0119

The Negotiate Security Software Provider SSP interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service crash from null dereference or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selectio...

CVE-2004-0119

CVE-2004-0119 describes a remote code execution and potential denial-of-service vulnerability in the Negotiate Security Support Provider (SSP) interface used by SPNEGO authentication in Windows 2000, Windows XP, and Windows Server 2003. The flaw is a buffer overrun in processing authentication pr...

CVE-2004-0119

The Negotiate Security Software Provider SSP interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service crash from null dereference or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selectio...