CVE-2003-0825

CVSS V2 High 9.3 CVSS V3 None
Description
The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.
Overview
  • CVE ID
  • CVE-2003-0825
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2004-03-03T05:00:00
  • Last Modified Date
  • 2019-04-30T14:27:13
Weakness Enumerations
CWE URL
CWE-20 http://cwe.mitre.org/data/definitions/20.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:C/I:C/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 9.3
  • Severity
  • HIGH
  • Exploitability Score
  • 8.6
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://www.securityfocus.com/bid/9624 Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/445214 US Government Resource
http://www.ciac.org/ciac/bulletins/o-077.shtml
http://www.osvdb.org/3903
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A802
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A801
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A800
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A704
https://exchange.xforce.ibmcloud.com/vulnerabilities/15037
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-006
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2003-0825
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0825
History
Created Old Value New Value Data Type Notes
2022-05-10 17:42:06 Added to TrackCVE