CVE-2003-0825

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Mar 3, 2004
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2003

CVE-2003-08267.5lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c whCVE-2003-08275.0The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) via a long packet to UDCVE-2003-08284.6Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group privileges when processing environment variablCVE-2003-08304.6Buffer overflow in marbles 1.0.2 and earlier allows local users to gain privileges via a long HOME environment variable.CVE-2003-08319.0ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attCVE-2003-08325.0Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a HostnCVE-2003-08337.5Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories that result in a long paCVE-2003-08347.2Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment vaCVE-2003-08357.5Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitrary code via an ASX header witCVE-2003-08367.5Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with "ConCVE-2003-08377.5Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with "Connect" privileges toCVE-2003-08387.5Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window an
CVE-2003-0825: Critical severity, CVSS 9.3 | Vulnix