MS04-036: Microsoft NNTP Component Remote Overflow (883935) (uncredentialed check)

Critical Nessus Plugin ID 15465


The remote NNTP server is susceptible to a buffer overflow attack.


The remote host is running a version of Microsoft NNTP server that is vulnerable to a buffer overflow issue.

An attacker may exploit this flaw to execute arbitrary commands on the remote host with the privileges of the NNTP server process.


Microsoft has released patches for Windows NT, 2000, and 2003.

See Also

Plugin Details

Severity: Critical

ID: 15465

File Name: msnntp_code_execution.nasl

Version: $Revision: 1.26 $

Type: remote

Agent: windows

Family: Windows

Published: 2004/10/12

Modified: 2017/08/30

Dependencies: 10159

Risk Information

Risk Factor: Critical


Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows, cpe:/a:microsoft:exchange_server

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2004/10/12

Vulnerability Publication Date: 2004/10/12

Reference Information

CVE: CVE-2004-0574

BID: 11379

OSVDB: 10697

MSFT: MS04-036

MSKB: 883935