CVE-2004-0574

Sažetak

The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.

Reference

http://marc.info/?l=bugtraq&m=109761632831563&w=2
http://www.ciac.org/ciac/bulletins/p-012.shtml
http://www.coresecurity.com/common/showdoc.php?idx=420&idxseccion=10
http://www.kb.cert.org/vuls/id/203126
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-036
https://exchange.xforce.ibmcloud.com/vulnerabilities/17641
https://exchange.xforce.ibmcloud.com/vulnerabilities/17661
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A246
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4392
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5021
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5070
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5926

CVSS

Base:	10.0
Impact:	10.0
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:L/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

09-04-2020 - 13:50

Objavljeno

03-11-2004 - 05:00