vulnwire
10.0crit

CVE-2004-0574in critical feed1 exploit

The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange…

Published 22 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
67.8%
percentile 99%
Public exploits
1
Exploit-DB

The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.

Exploit prediction (EPSS)

67.82% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • EDB-578 Microsoft Windows NNTP Service (XPAT) - Denial of Service (MS04-036) · dos · 2004-10-16

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
Technology feeds
Microsoft Exchange (RSS, critical only)

References

  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5070 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5021 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17641 · vdb-entry, x_refsource_XF, x_transferred
  • marc.info /?l=bugtraq&m=109761632831563&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4392 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • ciac.org /ciac/bulletins/p-012.shtml · third-party-advisory, government-resource, x_refsource_CIAC, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A246 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2004/ms04-036 · vendor-advisory, x_refsource_MS, x_transferred
  • kb.cert.org /vuls/id/203126 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5926 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • coresecurity.com /common/showdoc.php?idx=420&idxseccion=10 · x_refsource_MISC, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17661 · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.