Vulnerability CVE-2004-0899

Vulnerability Name:

CVE-2004-0899 (CCN-18341)

Assigned:

2004-12-14

Published:

2004-12-14

Updated:

2018-10-12

Summary:

The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability."

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

CWE-Other

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2004-0899

Source: CCN
Type: CIAC Information Bulletin P-053
Microsoft DHCP Vulnerabilities

Source: CCN
Type: Microsoft Security Bulletin MS04-042
Vulnerability in DHCP Could Allow Remote Code Execution and Denial Of Service (885249)

Source: CCN
Type: BID-11919
Microsoft Windows DHCP Server Logging Remote Denial Of Service Vulnerability

Source: MS
Type: UNKNOWN
MS04-042

Source: XF
Type: UNKNOWN
winnt-dhcp-machinename-dos(18341)

Source: XF
Type: UNKNOWN
winnt-dhcp-machinename-dos(18341)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:2280

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:4282

Vulnerable Configuration:

Configuration 1:

cpe:/o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:*:alpha:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:*:terminal_server_alpha:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp1:alpha:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp1:*:*:server:*:x86:*

OR cpe:/o:microsoft:windows_nt:4.0:sp1:*:*:terminal_server:*:x86:*

OR cpe:/o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp2:alpha:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp2:*:*:server:*:x86:*

OR cpe:/o:microsoft:windows_nt:4.0:sp2:*:*:terminal_server:*:x86:*

OR cpe:/o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp3:alpha:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp3:*:*:server:*:x86:*

OR cpe:/o:microsoft:windows_nt:4.0:sp3:*:*:terminal_server:*:x86:*

OR cpe:/o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp4:alpha:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp4:*:*:server:*:x86:*

OR cpe:/o:microsoft:windows_nt:4.0:sp4:*:*:terminal_server:*:x86:*

OR cpe:/o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp5:alpha:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp5:*:*:server:*:x86:*

OR cpe:/o:microsoft:windows_nt:4.0:sp5:*:*:terminal_server:*:x86:*

OR cpe:/o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp6:alpha:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp6:*:*:server:*:x86:*

OR cpe:/o:microsoft:windows_nt:4.0:sp6:*:*:terminal_server:*:x86:*

OR cpe:/o:microsoft:windows_nt:4.0:sp6a:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp6a:alpha:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*

OR cpe:/o:microsoft:windows_nt:4.0:sp6a:*:*:server:*:x86:*

Configuration CCN 1:

cpe:/o:microsoft:windows_nt:4.0:sp6a:*:*:server:*:x86:*

OR cpe:/o:microsoft:windows_nt:4.0:sp6:*:*:terminal_server:*:x86:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.mitre.oval:def:2280	V	DHCP Server Logging Vulnerability (NT 4.0)	2008-03-24
oval:org.mitre.oval:def:4282	V	DHCP Server Logging Vulnerability (Terminal Server)	2008-03-24

BACK