CVE-2005-0045

The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the "Server Message Block Vulnerability," and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields.

• http://marc.info/?l=bugtraq&m=110792638401852&w=2
• http://marc.info/?l=bugtraq&m=111040962600205&w=2
• http://marc.info/?l=ntbugtraq&m=110795643831169&w=2
• http://www.kb.cert.org/vuls/id/652537Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/12484
• http://www.us-cert.gov/cas/techalerts/TA05-039A.htmlPatch, Third Party Advisory, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-011
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19089
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1606
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1847
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1889
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4043
• http://marc.info/?l=bugtraq&m=110792638401852&w=2
• http://marc.info/?l=bugtraq&m=111040962600205&w=2
• http://marc.info/?l=ntbugtraq&m=110795643831169&w=2
• http://www.kb.cert.org/vuls/id/652537Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/12484
• http://www.us-cert.gov/cas/techalerts/TA05-039A.htmlPatch, Third Party Advisory, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-011
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19089
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1606
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1847
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1889
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4043

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0037The DNS implementation of DNRD before 2.10 allows remote att…
• CVE-2005-0038The DNS implementation of PowerDNS 2.9.16 and earlier allows…
• CVE-2005-0039Certain configurations of IPsec, when using Encapsulating Se…
• CVE-2005-0040Multiple cross-site scripting (XSS) vulnerabilities in DotNe…
• CVE-2005-0043Buffer overflow in Apple iTunes 4.7 allows remote attackers …
• CVE-2005-0044The OLE component in Windows 98, 2000, XP, and Server 2003, …
• CVE-2005-0047Windows 2000, XP, and Server 2003 does not properly "validat…
• CVE-2005-0048Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Serv…
• CVE-2005-0049Windows SharePoint Services and SharePoint Team Services for…
• CVE-2005-0050The License Logging service for Windows NT Server, Windows 2…
• CVE-2005-0051The Server service (srvsvc.dll) in Windows XP SP1 and SP2 al…
• CVE-2005-0053Internet Explorer 5.01, 5.5, and 6 allows remote attackers t…