The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.

The remote host is running a version of Microsoft NNTP server that is vulnerable to a buffer overflow issue.

An attacker may exploit this flaw to execute arbitrary commands on the remote host with the privileges of the NNTP server process.

The remote host is running a version of Microsoft NNTP server that is vulnerable to a buffer overflow issue. 

An attacker may exploit this flaw to execute arbitrary commands on the remote host with the privileges of the NNTP server process.

ID	Name	Product	Family	Type	Severity
2360	Microsoft NNTP Component Remote Overflow (883935)	Nessus Network Monitor	Generic		critical
2359	Microsoft NNTP Component Remote Overflow (883935)	Nessus Network Monitor	Generic		critical
15465	MS04-036: Microsoft NNTP Component Remote Overflow (883935) (uncredentialed check)	Nessus	Windows	Remote	critical

Detections

Analytics

CVE-2004-0574

critical

Tenable Plugins

critical

critical

critical