CVE-2003-0825 Information

Description

The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003 and possibly Windows NT and Server 2000 does not properly validate the length of certain packets which allows attackers to cause a denial of service and possibly execute arbitrary code.

Reference

http://www.ciac.org/ciac/bulletins/o-077.shtml http://www.kb.cert.org/vuls/id/445214 http://www.osvdb.org/3903 http://www.securityfocus.com/bid/9624 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-006 https://exchange.xforce.ibmcloud.com/vulnerabilities/15037 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A704 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A800 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A801 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A802