PT-2004-1310 · Microsoft · Windows 2000+2
CVE-2004-0119
·
Publicado
2004-04-16
·
Atualizado
2024-02-15
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Windows 2000
Windows XP
Windows Server 2003
Description
The issue allows remote attackers to cause a denial of service or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selection. This can be achieved by exploiting the Negotiate Security Software Provider (SSP) interface.
Recommendations
For Windows 2000, update to a version that includes the fix for this issue.
For Windows XP, update to a version that includes the fix for this issue.
For Windows Server 2003, update to a version that includes the fix for this issue.
Correção
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Windows 2000
Windows Server 2003
Windows Xp