The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.

The remote host contains a flaw in its SMTP service that could allow remote code execution.

Vulnerable services are SMTP service (Windows 2003), Exchange 2003 (Windows 2000) and Exchange 2000.

The remote host is running a version of Microsoft NNTP server that is vulnerable to a buffer overflow issue.

An attacker may exploit this flaw to execute arbitrary commands on the remote host with the privileges of the NNTP server process.

The remote host is running a version of Microsoft SMTP server that is vulnerable to a buffer overflow issue.

An attacker may exploit this flaw to execute arbitrary commands on the remote host with the privileges of the SMTP server process.

The remote host is running a version of Microsoft SMTP server which fails to validate DNS response data. An attacker can exploit this flaw to execute arbitrary code subject to the priviliges of the SMTP application server process.

ID	Name	Product	Family	Severity
17976	MS04-035: Vulnerability in SMTP Could Allow Remote Code Execution (885881)	Nessus	Windows : Microsoft Bulletins	critical
2360	Microsoft NNTP Component Remote Overflow (883935)	Nessus Network Monitor	Generic	critical
2359	Microsoft NNTP Component Remote Overflow (883935)	Nessus Network Monitor	Generic	critical
2358	Microsoft SMTP DNS Lookup Overflow (885881)	Nessus Network Monitor	SMTP Servers	critical
15464	Microsoft Windows/Exchange SMTP DNS Lookup Overflow (885881)	Nessus	SMTP problems	critical

Detections

Analytics

CVE-2004-0840

critical

Tenable Plugins

critical

critical

critical

critical

critical