CVE-2004-0567

State: Published
Severity: Not scored
Published: Dec 31, 2004
Updated: Aug 8, 2024
Reserved: Jun 15, 2004

Description

The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a denial of service (server crash), which results in an "unchecked buffer" and possibly triggers a buffer overflow, aka the "Name Validation Vulnerability."

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

13466third-party-advisory
VU#378160third-party-advisory
1012517vdb-entry
12370vdb-entry
wins-memory-pointer-hijack(18259)vdb-entry
11922vdb-entry
P-054third-party-advisorygovernment-resource
MS04-045vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.