CVE-2004-0567

CVE-2004-0567 describes a critical vulnerability in the Windows Internet Naming Service (WINS) affecting Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003. The flaw stems from improper validation of computer name values in WINS packets, allowing remote attackers to execute arbitrary code or cause a denial of service through an unchecked buffer, potentially leading to a buffer overflow. With a CVSS score of 7.5, this vulnerability is considered highly severe, requiring no authentication and having low attack complexity (AV:N/AC:L/Au:N). Successful exploitation could lead to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). The FAUCET Risk Score of 96/100 further emphasizes its high risk. While not listed on the KEV catalog or currently active on the Hot List, exploit code for remote code execution exists on ExploitDB (EDB-733). Despite its age and severity, there is minimal community discussion or media coverage surrounding this CVE.