Severity: : Critical
  CVE Kennungen: : CVE-2004-0900
  Advisory Date: 15 lutego 2011

  DESCRIPTION

cve: The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."

  INFORMATION EXPOSURE

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1000189
  Trend Micro Deep Security DPI Rule Name: 1000189 - Microsoft Windows NT 4.0 DHCP Server Request Buffer Overflow

  AFFECTED SOFTWARE AND VERSION:

  • Microsoft Windows NT 4.0
  • Microsoft Windows NT 4.0 SP1
  • Microsoft Windows NT 4.0 SP1 alpha
  • Microsoft Windows NT 4.0 SP2
  • Microsoft Windows NT 4.0 SP2 alpha
  • Microsoft Windows NT 4.0 SP3
  • Microsoft Windows NT 4.0 SP3 alpha
  • Microsoft Windows NT 4.0 SP4
  • Microsoft Windows NT 4.0 SP4 alpha
  • Microsoft Windows NT 4.0 SP5
  • Microsoft Windows NT 4.0 SP5 alpha
  • Microsoft Windows NT 4.0 SP6
  • Microsoft Windows NT 4.0 SP6 alpha
  • Microsoft Windows NT 4.0 SP6a
  • Microsoft Windows NT 4.0 SP6a alpha
  • Microsoft Windows NT 4.0 alpha
  • Microsoft Windows NT Enterprise Server 4.0
  • Microsoft Windows NT Enterprise Server 4.0 SP1
  • Microsoft Windows NT Enterprise Server 4.0 SP2
  • Microsoft Windows NT Enterprise Server 4.0 SP3
  • Microsoft Windows NT Enterprise Server 4.0 SP4
  • Microsoft Windows NT Enterprise Server 4.0 SP5
  • Microsoft Windows NT Enterprise Server 4.0 SP6
  • Microsoft Windows NT Enterprise Server 4.0 SP6a
  • Microsoft Windows NT Server 4.0
  • Microsoft Windows NT Server 4.0 SP1
  • Microsoft Windows NT Server 4.0 SP2
  • Microsoft Windows NT Server 4.0 SP3
  • Microsoft Windows NT Server 4.0 SP4
  • Microsoft Windows NT Server 4.0 SP5
  • Microsoft Windows NT Server 4.0 SP6
  • Microsoft Windows NT Server 4.0 SP6a
  • Microsoft Windows NT Terminal Server 4.0
  • Microsoft Windows NT Terminal Server 4.0 SP1
  • Microsoft Windows NT Terminal Server 4.0 SP2
  • Microsoft Windows NT Terminal Server 4.0 SP3
  • Microsoft Windows NT Terminal Server 4.0 SP4
  • Microsoft Windows NT Terminal Server 4.0 SP5
  • Microsoft Windows NT Terminal Server 4.0 SP6
  • Microsoft Windows NT Terminal Server 4.0 alpha