CVE-2004-1080

Published: Jan 10, 2005Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."

Affected (37)

Products: Microsoft: Windows 2000, Windows 2003 Server, Windows Nt

3 products

Windows 2003 Server

Configuration A

37 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2003 Server	Version 2000
Microsoft Windows 2003 Server	Version 2003
Microsoft Windows 2003 Server	Version enterprise
Microsoft Windows 2003 Server	Version enterprise_64-bit
Microsoft Windows 2003 Server	Version r2
Microsoft Windows 2003 Server	Version r2
Microsoft Windows 2003 Server	Version standard
Microsoft Windows 2003 Server	Version web
Microsoft Windows Nt	Version 4.0
Microsoft Windows Nt	Version 4.0
Microsoft Windows Nt	Version 4.0
Microsoft Windows Nt	Version 4.0 sp1
Microsoft Windows Nt	Version 4.0 sp1
Microsoft Windows Nt	Version 4.0 sp1
Microsoft Windows Nt	Version 4.0 sp2
Microsoft Windows Nt	Version 4.0 sp2
Microsoft Windows Nt	Version 4.0 sp2
Microsoft Windows Nt	Version 4.0 sp3
Microsoft Windows Nt	Version 4.0 sp3
Microsoft Windows Nt	Version 4.0 sp3
Microsoft Windows Nt	Version 4.0 sp4
Microsoft Windows Nt	Version 4.0 sp4
Microsoft Windows Nt	Version 4.0 sp4
Microsoft Windows Nt	Version 4.0 sp5
Microsoft Windows Nt	Version 4.0 sp5
Microsoft Windows Nt	Version 4.0 sp5
Microsoft Windows Nt	Version 4.0 sp6
Microsoft Windows Nt	Version 4.0 sp6
Microsoft Windows Nt	Version 4.0 sp6
Microsoft Windows Nt	Version 4.0 sp6a
Microsoft Windows Nt	Version 4.0 sp6a
Microsoft Windows Nt	Version 4.0 sp6a

References (36)

http://marc.info/?l=bugtraq&m=110150370506704&w=2

Source: cve@mitre.org

http://secunia.com/advisories/13328/

Source: cve@mitre.org

http://securitytracker.com/id?1012516

Source: cve@mitre.org

http://support.microsoft.com/kb/890710

Source: cve@mitre.org

http://www.ciac.org/ciac/bulletins/p-054.shtml

Source: cve@mitre.org

http://www.immunitysec.com/downloads/instantanea.pdf

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/145134

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.osvdb.org/12378

Source: cve@mitre.org

http://www.securityfocus.com/bid/11763

Source: cve@mitre.org

PatchVendor Advisory

http://xforce.iss.net/xforce/alerts/id/184

Source: cve@mitre.org

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/18259

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1549

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2541

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2734

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3677

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4372

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4831

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110150370506704&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/13328/

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1012516

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.microsoft.com/kb/890710

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ciac.org/ciac/bulletins/p-054.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.immunitysec.com/downloads/instantanea.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/145134

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

http://www.osvdb.org/12378

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/11763

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://xforce.iss.net/xforce/alerts/id/184

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/18259

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1549

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2541

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2734

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3677

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4372

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4831

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.