NVD

Id
71001  
Name
CVE-2004-0574  
Description
The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-11-03  
Modified Date
2017-07-10  
Seq
2004-0574  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
366511 71001 CVE-2004-0574 20041012 CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities  View
366512 71001 CVE-2004-0574 oval:org.mitre.oval:def:246  View
366513 71001 CVE-2004-0574 oval:org.mitre.oval:def:4392  View
366514 71001 CVE-2004-0574 oval:org.mitre.oval:def:5021  View
366515 71001 CVE-2004-0574 oval:org.mitre.oval:def:5070  View
366516 71001 CVE-2004-0574 oval:org.mitre.oval:def:5926  View
366517 71001 CVE-2004-0574 P-012  View
366518 71001 CVE-2004-0574 http://www.coresecurity.com/common/showdoc.php?idx=420&idxseccion=10  View
366519 71001 CVE-2004-0574 VU#203126  View
366520 71001 CVE-2004-0574 MS04-036  View
366521 71001 CVE-2004-0574 win-nntp-bo(17641)  View
366522 71001 CVE-2004-0574 win-ms04036-patch(17661)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63090 JVNDB-2004-000432 Microsoft Windows の XPAT コマンドにおけるバッファオーバーフローの脆弱性 Microsoft Windows のサーバ OS に含まれている NNTP コンポーネントの XPAT コマンドには、渡されたメッセージ長を適切にチェックしない不備のため、過度に長いメッセージを受け取った場合にバッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0574 9001 CVE-2004-0574 71001 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000432.html 2004-10-12 2007-04-01 View