CVE-2005-0045

Published Feb 8, 2005 CVSS 2.0 · 7.5 High EPSS 70.3% KEV · Not listed
Description
The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the "Server Message Block Vulnerability," and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 8:57 PM
Reserved
Jan 11, 2005, 12:00 AM
Status
Modified
Published
May 2, 2005, 4:00 AM
Modified
Jun 16, 2026, 10:10 PM