CVE-2004-0567

The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a denial of service (server crash), which results in an "unchecked buffer" and possibly triggers a buffer overflow, aka the "Name Validation Vulnerability."

• http://secunia.com/advisories/13466
• http://securitytracker.com/id?1012517
• http://www.ciac.org/ciac/bulletins/p-054.shtmlPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/378160Patch, Third Party Advisory, US Government Resource
• http://www.osvdb.org/12370
• http://www.securityfocus.com/bid/11922
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18259
• http://secunia.com/advisories/13466
• http://securitytracker.com/id?1012517
• http://www.ciac.org/ciac/bulletins/p-054.shtmlPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/378160Patch, Third Party Advisory, US Government Resource
• http://www.osvdb.org/12370
• http://www.securityfocus.com/bid/11922
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18259

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0561Format string vulnerability in the log routine for gopher da…
• CVE-2004-0562Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2004-0563The tspc.conf configuration file in freenet6 before 0.9.6 an…
• CVE-2004-0564Roaring Penguin pppoe (rp-ppoe), if installed or configured …
• CVE-2004-0565Floating point information leak in the context switch code f…
• CVE-2004-0566Integer overflow in imgbmp.cxx for Windows 2000 allows remot…
• CVE-2004-0568HyperTerminal application for Windows NT 4.0, Windows 2000, …
• CVE-2004-0569The RPC Runtime Library for Microsoft Windows NT 4.0 allows …
• CVE-2004-0571Microsoft Word for Windows 6.0 Converter does not properly v…
• CVE-2004-0572Buffer overflow in the Windows Program Group Converter (grpc…
• CVE-2004-0573Buffer overflow in the converter for Microsoft WordPerfect 5…
• CVE-2004-0574The Network News Transfer Protocol (NNTP) component of Micro…