CVE-2004-0899
Summary
| CVE | CVE-2004-0899 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2005-01-10 05:00:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability." |
Risk And Classification
Primary CVSS: v2.0 5 from [email protected]
AV:N/AC:L/Au:N/C:N/I:N/A:P
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
NoneAvailability
PartialAV:N/AC:L/Au:N/C:N/I:N/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Microsoft | Windows Nt | 4.0 | All | All | All |
| Operating System | Microsoft | Windows Nt | 4.0 | All | alpha | All |
| Operating System | Microsoft | Windows Nt | 4.0 | All | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | All | server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | All | terminal_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | All | terminal_server_alpha | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp1 | All | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp1 | alpha | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp1 | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp1 | server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp1 | terminal_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp2 | All | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp2 | alpha | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp2 | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp2 | server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp2 | terminal_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp3 | All | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp3 | alpha | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp3 | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp3 | server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp3 | terminal_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp4 | All | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp4 | alpha | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp4 | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp4 | server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp4 | terminal_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp5 | All | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp5 | alpha | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp5 | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp5 | server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp5 | terminal_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6 | All | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6 | alpha | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6 | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6 | server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6 | terminal_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6a | All | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6a | alpha | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6a | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6a | server | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Microsoft Security Bulletin MS04-042 - Important | Microsoft Docs | af854a3a-2127-422b-91ae-364da2661108 | docs.microsoft.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.