CVE-2005-0050
Last modified
CVE-2005-0050 is a vulnerability of currently unknown severity. The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, aka the "License Logging Service Vulnerability.". EPSS estimates a 46.51% chance of exploitation in the next 30 days.
Description
The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, aka the "License Logging Service Vulnerability."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows 2003 Server | 2000 |
| Microsoft | Windows 2003 Server | 2003 |
| Microsoft | Windows 2003 Server | enterprise |
| Microsoft | Windows 2003 Server | enterprise_64-bit |
| Microsoft | Windows 2003 Server | r2 |
| Microsoft | Windows 2003 Server | standard |
| Microsoft | Windows 2003 Server | web |
| Microsoft | Windows Nt | 4.0 |
References
- http://www.kb.cert.org/vuls/id/130433Patch, US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA05-039A.htmlPatch, US Government Resource
- http://www.kb.cert.org/vuls/id/130433Patch, US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA05-039A.htmlPatch, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-0050?
How severe is CVE-2005-0050?
How do I fix CVE-2005-0050?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-0043Buffer overflow in Apple iTunes 4.7 allows remote attackers …
- CVE-2005-0044The OLE component in Windows 98, 2000, XP, and Server 2003, …
- CVE-2005-0045The Server Message Block (SMB) implementation for Windows NT…
- CVE-2005-0047Windows 2000, XP, and Server 2003 does not properly "validat…
- CVE-2005-0048Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Serv…
- CVE-2005-0049Windows SharePoint Services and SharePoint Team Services for…
- CVE-2005-0051The Server service (srvsvc.dll) in Windows XP SP1 and SP2 al…
- CVE-2005-0053Internet Explorer 5.01, 5.5, and 6 allows remote attackers t…
- CVE-2005-0054Internet Explorer 5.01, 5.5, and 6 allows remote attackers t…
- CVE-2005-0055Internet Explorer 5.01, 5.5, and 6 does not properly validat…
- CVE-2005-0056Internet Explorer 5.01, 5.5, and 6 does not properly validat…
- CVE-2005-0057The Hyperlink Object Library for Windows 98, 2000, XP, and S…
Are you affected by CVE-2005-0050?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
