CVE-2004-1080
60Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 80%
da publicação à arma132 dias
Publicada no NVD1 de dez.
1ª PoC+132d
metasploit+13d
probabilidade de exploração
80%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
2 exploit(s) público(s)
The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."
Produtos afetados
n/a · n/aPoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/909não verificadoexploitdbwww.exploit-db.com/exploits/16359não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://marc.info/?l=bugtraq&m=110150370506704&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045http://secunia.com/advisories/13328/http://securitytracker.com/id?1012516https://exchange.xforce.ibmcloud.com/vulnerabilities/18259https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1549https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2541https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2734https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3677https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4372https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4831http://support.microsoft.com/kb/890710