CVE-2003-0825

Sažetak

The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.

Reference

http://www.ciac.org/ciac/bulletins/o-077.shtml
http://www.kb.cert.org/vuls/id/445214
http://www.osvdb.org/3903
http://www.securityfocus.com/bid/9624
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-006
https://exchange.xforce.ibmcloud.com/vulnerabilities/15037
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A704
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A800
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A801
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A802

CVSS

Base:	9.3
Impact:	10.0
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:M/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

30-04-2019 - 14:27

Objavljeno

03-03-2004 - 05:00