CVE-2003-0825: Input Validation
First published: Wed Mar 03 2004(Updated: )
The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows NT | =4.0-sp3 | |
| Microsoft Windows Server 2003 | =web | |
| Microsoft Windows Server 2003 | =enterprise | |
| Microsoft Windows Server 2003 | =enterprise_64-bit | |
| Microsoft Windows 2000 | ||
| Microsoft Windows NT | =4.0-sp6 | |
| Microsoft Windows NT | =4.0 | |
| Microsoft Windows NT | =4.0-sp1 | |
| Microsoft Windows NT | =4.0-sp3 | |
| Microsoft Windows 2000 | =sp2 | |
| Microsoft Windows NT | =4.0-sp2 | |
| Microsoft Windows NT | =4.0-sp4 | |
| Microsoft Windows NT | =4.0-sp5 | |
| Microsoft Windows 2000 | =sp4 | |
| Microsoft Windows NT | =4.0 | |
| Microsoft Windows NT | =4.0-sp1 | |
| Microsoft Windows NT | =4.0-sp6 | |
| Microsoft Windows NT | =4.0-sp6 | |
| Microsoft Windows 2000 | =sp1 | |
| Microsoft Windows Server 2003 | =r2 | |
| Microsoft Windows NT | =4.0-sp1 | |
| Microsoft Windows NT | =4.0-sp4 | |
| Microsoft Windows NT | =4.0-sp4 | |
| Microsoft Windows NT | =4.0-sp6a | |
| Microsoft Windows Server 2003 | =r2 | |
| Microsoft Windows NT | =4.0 | |
| Microsoft Windows NT | =4.0-sp2 | |
| Microsoft Windows Server 2003 | =standard | |
| Microsoft Windows NT | =4.0-sp2 | |
| Microsoft Windows NT | =4.0-sp3 | |
| Microsoft Windows NT | =4.0-sp6a | |
| Microsoft Windows 2000 | =sp3 | |
| Microsoft Windows NT | =4.0-sp5 | |
| Microsoft Windows NT | =4.0-sp5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/9624
- http://www.kb.cert.org/vuls/id/445214
- http://www.ciac.org/ciac/bulletins/o-077.shtml
- http://www.osvdb.org/3903
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A802
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A801
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A800
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A704
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15037
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-006
Frequently Asked Questions
What is the severity of CVE-2003-0825?
CVE-2003-0825 is considered a critical vulnerability due to its potential to cause a denial of service and possibly allow arbitrary code execution.
How do I fix CVE-2003-0825?
To fix CVE-2003-0825, apply the latest security patches provided by Microsoft for affected versions of Windows.
Which systems are affected by CVE-2003-0825?
CVE-2003-0825 affects Microsoft Windows Server 2003, Windows NT, and Windows 2000.
Can CVE-2003-0825 be exploited remotely?
Yes, CVE-2003-0825 can be exploited remotely, allowing attackers to launch denial of service attacks.
What are the potential impacts of CVE-2003-0825?
The potential impacts of CVE-2003-0825 include service disruptions and unauthorized execution of malicious code.
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/remedy
- agent/last-modified-date
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft windows nt
- version/microsoft windows nt/4.0-sp3
- canonical/microsoft windows server 2003
- version/microsoft windows server 2003/web
- version/microsoft windows server 2003/enterprise
- version/microsoft windows server 2003/enterprise_64-bit
- canonical/microsoft windows 2000
- version/microsoft windows nt/4.0-sp6
- version/microsoft windows nt/4.0
- version/microsoft windows nt/4.0-sp1
- version/microsoft windows 2000/sp2
- version/microsoft windows nt/4.0-sp2
- version/microsoft windows nt/4.0-sp4
- version/microsoft windows nt/4.0-sp5
- version/microsoft windows 2000/sp4
- version/microsoft windows 2000/sp1
- version/microsoft windows server 2003/r2
- version/microsoft windows nt/4.0-sp6a
- version/microsoft windows server 2003/standard
- version/microsoft windows 2000/sp3