NVD

Id
70583  
Name
CVE-2004-0119  
Description
The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service (crash from null dereference) or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selection.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-06-01  
Modified Date
2017-07-10  
Seq
2004-0119  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
363944 70583 CVE-2004-0119 20040414 NSFOCUS SA2004-01 : DoS Vulnerability in Microsoft Windows SPNEGO Protocol Decoding  View
363945 70583 CVE-2004-0119 oval:org.mitre.oval:def:1808  View
363946 70583 CVE-2004-0119 oval:org.mitre.oval:def:1962  View
363947 70583 CVE-2004-0119 oval:org.mitre.oval:def:1997  View
363948 70583 CVE-2004-0119 O-114  View
363949 70583 CVE-2004-0119 VU#638548  View
363950 70583 CVE-2004-0119 MS04-011  View
363951 70583 CVE-2004-0119 10113  View
363952 70583 CVE-2004-0119 TA04-104A  View
363953 70583 CVE-2004-0119 win-spp-bo(15715)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62790 JVNDB-2004-000131 Microsoft Windows の Negotiate SSP インターフェイスにおけるバッファオーバーフローの脆弱性 Microsoft Windows に含まれる Negotiate Security Software Provider (SSP) インタフェースには、認証プロトコルの選択中に使用される値のチェックの不備のため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0119 8546 CVE-2004-0119 70583 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000131.html 2004-04-13 2007-04-01 View