Severity: : Medium
  CVE Kennungen: : CVE-2004-0899
  Advisory Date: 21 de июля de 2015

  DESCRIPTION

The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability."

  INFORMATION EXPOSURE

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1000188
  Trend Micro Deep Security DPI Rule Name: 1000188 - Microsoft Windows NT 4.0 DHCP Server Logging Buffer Overflow

  AFFECTED SOFTWARE AND VERSION:

  • Microsoft Windows NT 4.0
  • Microsoft Windows NT 4.0 SP1
  • Microsoft Windows NT 4.0 SP1 alpha
  • Microsoft Windows NT 4.0 SP2
  • Microsoft Windows NT 4.0 SP2 alpha
  • Microsoft Windows NT 4.0 SP3
  • Microsoft Windows NT 4.0 SP3 alpha
  • Microsoft Windows NT 4.0 SP4
  • Microsoft Windows NT 4.0 SP4 alpha
  • Microsoft Windows NT 4.0 SP5
  • Microsoft Windows NT 4.0 SP5 alpha
  • Microsoft Windows NT 4.0 SP6
  • Microsoft Windows NT 4.0 SP6 alpha
  • Microsoft Windows NT 4.0 SP6a
  • Microsoft Windows NT 4.0 SP6a alpha
  • Microsoft Windows NT 4.0 alpha
  • Microsoft Windows NT Enterprise Server 4.0
  • Microsoft Windows NT Enterprise Server 4.0 SP1
  • Microsoft Windows NT Enterprise Server 4.0 SP2
  • Microsoft Windows NT Enterprise Server 4.0 SP3
  • Microsoft Windows NT Enterprise Server 4.0 SP4
  • Microsoft Windows NT Enterprise Server 4.0 SP5
  • Microsoft Windows NT Enterprise Server 4.0 SP6
  • Microsoft Windows NT Enterprise Server 4.0 SP6a
  • Microsoft Windows NT Server 4.0
  • Microsoft Windows NT Server 4.0 SP1