CVE-2003-0825 The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers....
HighCVSS 9.3
EPSS 12.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | All versions | No fix listed |
| Microsoft windows 2003 server | = enterprise | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = standard | No fix listed |
| Microsoft windows 2003 server | = web | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
| Microsoft windows nt | = 4.0-sp1 | No fix listed |
| Microsoft windows nt | = 4.0-sp2 | No fix listed |
| Microsoft windows nt | = 4.0-sp3 | No fix listed |
| Microsoft windows nt | = 4.0-sp4 | No fix listed |
| Microsoft windows nt | = 4.0-sp5 | No fix listed |
| Microsoft windows nt | = 4.0-sp6 | No fix listed |
| Microsoft windows nt | = 4.0-sp6a | No fix listed |
References
- O-077 government-resource third-party-advisory
- VU#445214 third-party-advisory us-government-resource
- 3903 vdb-entry
- 9624 patch vdb-entry vendor-advisory
- MS04-006 vendor-advisory
- win-wins-gsflag-dos(15037) vdb-entry
- oval:org.mitre.oval:def:704 signature vdb-entry
- oval:org.mitre.oval:def:800 signature vdb-entry
- oval:org.mitre.oval:def:801 signature vdb-entry
- oval:org.mitre.oval:def:802 signature vdb-entry