CVEvulnerability
CVE-2003-0825
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-03-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.
Affected configurations
• microsoft windows 2000
• microsoft windows 2003 server
• microsoft windows 2003 server enterprise
• microsoft windows 2003 server enterprise 64-bit
• microsoft windows 2003 server r2
• microsoft windows 2003 server standard
• microsoft windows 2003 server web
• microsoft windows nt 4.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
Referenced by CWE · observed example (1)
- CWE-130 Improper Handling of Length Parameter Inconsistency weakness
References
- http://www.ciac.org/ciac/bulletins/o-077.shtml www.ciac.org
- http://www.kb.cert.org/vuls/id/445214 US Government Resource
- http://www.osvdb.org/3903 www.osvdb.org
- http://www.securityfocus.com/bid/9624 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-006 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15037 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A704 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A800 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A801 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A802 oval.cisecurity.org
- http://www.ciac.org/ciac/bulletins/o-077.shtml www.ciac.org
- http://www.kb.cert.org/vuls/id/445214 US Government Resource
- http://www.osvdb.org/3903 www.osvdb.org
- http://www.securityfocus.com/bid/9624 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-006 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15037 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A704 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A800 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A801 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A802 oval.cisecurity.org