Unscored severity · published Dec 31, 2004
CVE-2004-0567
The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly…
–
CVSS
68.7%
EPSS
No
On KEV
Description
The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a denial of service (server crash), which results in an "unchecked buffer" and possibly triggers a buffer overflow, aka the "Name Validation Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)68.7% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W2
Windows 2000 · Microsoft
All versions, or not specified · source: NVD
W2
Windows 2003 Server · Microsoft
64-bit; r2 · source: NVD
WN
Windows NT · Microsoft
4.0; 4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0567
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0567
secunia.com
http://secunia.com/advisories/13466
securitytracker.com
http://securitytracker.com/id?1012517
Patch
http://www.ciac.org/ciac/bulletins/p-054.shtml
Patch
http://www.kb.cert.org/vuls/id/378160
www.osvdb.org
http://www.osvdb.org/12370
www.securityfocus.com
http://www.securityfocus.com/bid/11922
More from Windows 2000
9.8
CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability
8.8
CVE-2009-1537
Microsoft DirectX NULL Byte Overwrite Vulnerability
7.8
CVE-2010-0232
Microsoft Windows Kernel Exception Handler Vulnerability
7.8
CVE-2009-1123
Microsoft Windows Improper Input Validation Vulnerability
7.8
CVE-2004-0210
Microsoft Windows Privilege Escalation Vulnerability