MS04-036: Microsoft NNTP Component Remote Overflow (883935) (uncredentialed check)

critical Nessus Plugin ID 15465

Language:

Synopsis

The remote NNTP server is susceptible to a buffer overflow attack.

Description

The remote host is running a version of Microsoft NNTP server that is vulnerable to a buffer overflow issue.

An attacker may exploit this flaw to execute arbitrary commands on the remote host with the privileges of the NNTP server process.

Solution

Microsoft has released patches for Windows NT, 2000, and 2003.

Plugin Details

Severity: Critical

ID: 15465

File Name: msnntp_code_execution.nasl

Version: 1.28

Type: remote

Agent: windows

Family: Windows

Published: 10/12/2004

Updated: 11/15/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows, cpe:/a:microsoft:exchange_server

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/12/2004

Vulnerability Publication Date: 10/12/2004

Reference Information

CVE: CVE-2004-0574

BID: 11379

MSFT: MS04-036

MSKB: 883935

Detections

Analytics