CVE-2004-0574

Опубликовано: 03 нояб. 2004

Источник: nvd

CVSS2: 10

EPSS Высокий

Описание

The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.

Ссылки

http://marc.info/?l=bugtraq&m=109761632831563&w=2
Mailing List
Third Party Advisory
http://www.ciac.org/ciac/bulletins/p-012.shtml
Broken Link
http://www.coresecurity.com/common/showdoc.php?idx=420&idxseccion=10
Third Party Advisory
http://www.kb.cert.org/vuls/id/203126
Patch
Third Party Advisory
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-036
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17641
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/17661
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A246
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4392
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5021
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5070
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5926
Third Party Advisory
http://marc.info/?l=bugtraq&m=109761632831563&w=2
Mailing List
Third Party Advisory
http://www.ciac.org/ciac/bulletins/p-012.shtml
Broken Link
http://www.coresecurity.com/common/showdoc.php?idx=420&idxseccion=10
Third Party Advisory
http://www.kb.cert.org/vuls/id/203126
Patch
Third Party Advisory
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-036
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17641
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/17661
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A246
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2003:-:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:microsoft:windows_2000:-:-:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:server:*:*:*

cpe:2.3:o:microsoft:windows_server_2003:r2:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.85365

Высокий

10 Critical

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-2jpv-5fxc-x33v

github

почти 4 года назад