CVE-2003-0825

The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.

• CWE-20

• http://www.ciac.org/ciac/bulletins/o-077.shtml
• http://www.kb.cert.org/vuls/id/445214US Government Resource
• http://www.osvdb.org/3903
• http://www.securityfocus.com/bid/9624Patch, Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-006
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15037
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A704
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A800
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A801
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A802
• http://www.ciac.org/ciac/bulletins/o-077.shtml
• http://www.kb.cert.org/vuls/id/445214US Government Resource
• http://www.osvdb.org/3903
• http://www.securityfocus.com/bid/9624Patch, Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-006
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15037
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A704
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A800
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A801
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A802

Published

Mar 3, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0819Buffer overflow in the H.323 filter of Microsoft Internet Se…
• CVE-2003-0820Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Work…
• CVE-2003-0821Microsoft Excel 97, 2000, and 2002 allows remote attackers t…
• CVE-2003-0822Buffer overflow in the debug functionality in fp30reg.dll of…
• CVE-2003-0823Internet Explorer 6 SP1 and earlier allows remote attackers …
• CVE-2003-0824Unknown vulnerability in the SmartHTML interpreter (shtml.dl…
• CVE-2003-0826lsh daemon (lshd) does not properly return from certain func…
• CVE-2003-0827The DB2 Discovery Service for IBM DB2 before FixPak 10a allo…
• CVE-2003-0828Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows …
• CVE-2003-0830Buffer overflow in marbles 1.0.2 and earlier allows local us…
• CVE-2003-0831ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate n…
• CVE-2003-0832Directory traversal vulnerability in webfs before 1.20 allow…