vulnwire
10.0crit

CVE-2004-1080in critical feed3 exploits

The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to wri…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
79.8%
percentile 100%
Public exploits
3
Metasploit · Exploit-DB

The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."

Exploit prediction (EPSS)

79.80% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

  • Metasploit exploit/windows/wins/ms04_045_wins MS04-045 Microsoft WINS Service Memory Overwrite · metasploit exploit, great rank · 2004-12-14
  • EDB-909 Microsoft Windows - 'WINS' Remote Buffer Overflow (MS04-045) (3) · remote · 2005-04-12
  • EDB-16359 Microsoft WINS - Service Memory Overwrite (MS04-045) (Metasploit) · remote · 2010-09-20

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

  • securitytracker.com /id?1012516 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • support.microsoft.com /kb/890710 · vendor-advisory, x_refsource_MSKB, x_transferred
  • kb.cert.org /vuls/id/145134 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2541 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • osvdb.org /12378 · vdb-entry, x_refsource_OSVDB, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1549 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • immunitysec.com /downloads/instantanea.pdf · x_refsource_MISC, x_transferred
  • secunia.com /advisories/13328/ · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/18259 · vdb-entry, x_refsource_XF, x_transferred
  • ciac.org /ciac/bulletins/p-054.shtml · third-party-advisory, government-resource, x_refsource_CIAC, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3677 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4831 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • marc.info /?l=bugtraq&m=110150370506704&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/11763 · vdb-entry, x_refsource_BID, x_transferred
  • xforce.iss.net /xforce/alerts/id/184 · third-party-advisory, x_refsource_ISS, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2004/ms04-045 · vendor-advisory, x_refsource_MS, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4372 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2734 · vdb-entry, signature, x_refsource_OVAL, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.