Back to search
CVE-2004-0574
Published: Oct 16, 2004
Modified: Aug 8, 2024
PUBLISHED
Description
The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
oval:org.mitre.oval:def:5070
vdb-entry
signature
x_refsource_OVAL
oval:org.mitre.oval:def:5021
vdb-entry
signature
x_refsource_OVAL
win-nntp-bo(17641)
vdb-entry
x_refsource_XF
20041012 CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities
mailing-list
x_refsource_BUGTRAQ
oval:org.mitre.oval:def:4392
vdb-entry
signature
x_refsource_OVAL
P-012
third-party-advisory
government-resource
x_refsource_CIAC
oval:org.mitre.oval:def:246
vdb-entry
signature
x_refsource_OVAL
MS04-036
vendor-advisory
x_refsource_MS
VU#203126
third-party-advisory
x_refsource_CERT-VN
oval:org.mitre.oval:def:5926
vdb-entry
signature
x_refsource_OVAL
win-ms04036-patch(17661)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now