National Cyber-Alert System

Vulnerability Summary for CVE-2004-1080

Overview

The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#145134

Name: VU#145134

Type: Advisory; Patch Information

Hyperlink:http://www.kb.cert.org/vuls/id/145134

External Source: BID

Name: 11763

Type: Advisory; Patch Information

Hyperlink:http://www.securityfocus.com/bid/11763

External Source: XF

Name: wins-memory-pointer-hijack(18259)

Type: Advisory

Hyperlink:http://xforce.iss.net/xforce/xfdb/18259

External Source: ISS

Name: 20041129 Microsoft WINS Server Vulnerability

Hyperlink:http://xforce.iss.net/xforce/alerts/id/184

External Source: OSVDB

Name: 12378

Hyperlink:http://www.osvdb.org/12378

External Source: MS

Name: MS04-045

Hyperlink:http://www.microsoft.com/technet/security/bulletin/MS04-045.mspx

External Source: MISC

Name: http://www.immunitysec.com/downloads/instantanea.pdf

Hyperlink:http://www.immunitysec.com/downloads/instantanea.pdf

External Source: CIAC

Name: P-054

Hyperlink:http://www.ciac.org/ciac/bulletins/p-054.shtml

External Source: MSKB

Name: 890710

Hyperlink:http://support.microsoft.com/kb/890710

External Source: SECTRACK

Name: 1012516

Hyperlink:http://securitytracker.com/id?1012516

External Source: SECUNIA

Name: 13328

Hyperlink:http://secunia.com/advisories/13328/

External Source: BUGTRAQ

Name: 20041126 Immunity, Inc Advisor

Type: Advisory

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=110150370506704&w=2

External Source: BUGTRAQ

Name: 20041126 Immunity, Inc Advisor

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=110150370506704&w=2

US Government Resource: oval:org.mitre.oval:def:4831

Name: oval:org.mitre.oval:def:4831

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4831

US Government Resource: oval:org.mitre.oval:def:4372

Name: oval:org.mitre.oval:def:4372

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4372

US Government Resource: oval:org.mitre.oval:def:3677

Name: oval:org.mitre.oval:def:3677

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3677

US Government Resource: oval:org.mitre.oval:def:2734

Name: oval:org.mitre.oval:def:2734

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2734

US Government Resource: oval:org.mitre.oval:def:2541

Name: oval:org.mitre.oval:def:2541

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2541

US Government Resource: oval:org.mitre.oval:def:1549

Name: oval:org.mitre.oval:def:1549

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1549