CVE-2004-0567

N/A Unknown
Published: December 31, 2004 Modified: April 16, 2026
View on NVD

Description

The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a denial of service (server crash), which results in an "unchecked buffer" and possibly triggers a buffer overflow, aka the "Name Validation Vulnerability."

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://www.ciac.org/ciac/bulletins/p-054.shtml
Source: cve@mitre.org
Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/378160
Source: cve@mitre.org
Patch Third Party Advisory US Government Resource
http://www.osvdb.org/12370
Source: cve@mitre.org
http://secunia.com/advisories/13466
Source: af854a3a-2127-422b-91ae-364da2661108
http://securitytracker.com/id?1012517
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ciac.org/ciac/bulletins/p-054.shtml
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/378160
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Third Party Advisory US Government Resource
http://www.osvdb.org/12370
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/11922
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/18259
Source: af854a3a-2127-422b-91ae-364da2661108

16 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
25.3%
96th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

microsoft