CVE-2004-1080
60Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 80%
de la publicación al arma132 días
Publicada en NVD1 dic
1ª PoC+132d
metasploit+13d
probabilidad de explotación
80%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
2 exploit(s) público(s)
The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."
Productos afectados
n/a · n/aPoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/909no verificadoexploitdbwww.exploit-db.com/exploits/16359no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://marc.info/?l=bugtraq&m=110150370506704&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045http://secunia.com/advisories/13328/http://securitytracker.com/id?1012516https://exchange.xforce.ibmcloud.com/vulnerabilities/18259https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1549https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2541https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2734https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3677https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4372https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4831http://support.microsoft.com/kb/890710