Unscored severity · published Jan 10, 2005
CVE-2004-0899
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages,…
–
CVSS
72.6%
EPSS
No
On KEV
Description
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)72.6% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WN
Windows NT · Microsoft
4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0899
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0899
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/18341
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2280
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4282
More from Windows NT
7.8
CVE-2004-0210
Microsoft Windows Privilege Escalation Vulnerability
7.8
CVE-2002-0367
Microsoft Windows Privilege Escalation Vulnerability
9.8
CVE-2002-0391
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to…
9.8
CVE-2000-1218
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS…
9.1
CVE-1999-0511
IP forwarding is enabled on a machine which is not a router or firewall