« Volver al listado

CVE-2004-0728

Estado: ModificadaMedia (5)—

The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of service (crash) via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microsoft — Systems Management Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2004-0728",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2004-07-27T04:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=108983763710315&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16696",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=108983763710315&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16696",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of service (crash) via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address."
    },
    {
      "lang": "es",
      "value": "El servicio de Cliente de Control Remoto de Microsoft's Systems Management Server (SMS) 2.50.2726.0  permite a atacantes remotos causar una denegación de servicio (caída) mediante un paquete de datos al puerto TCP 2702 que causa que el servidor lea o escriba de una dirección de memoria inválida."
    }
  ],
  "lastModified": "2026-06-16T22:06:14.887",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:systems_management_server:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F714FC20-0412-472D-B4A3-EA548EE14E81"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:systems_management_server:1.2:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DCC15CE2-708F-4BB2-A4A5-A055B9541C12"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:systems_management_server:1.2:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D334FC1-DA2E-4A78-98A6-81C36713F977"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:systems_management_server:1.2:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E75A5E5-3C2A-4182-B5C4-FD58579587EF"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:systems_management_server:1.2:sp4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCD1E3C3-B7AC-411B-8600-A51E2264409B"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:systems_management_server:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43E8A8EF-B54F-4413-9BC8-A6A479951313"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:systems_management_server:2.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B010774-CFB9-43F9-B5C4-2FE489B1FBE6"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:systems_management_server:2.50.2726:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5081CEE-911E-447A-9457-A5AAF34A8A9F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}