CVE-2004-0900
Estado: ModificadaAlta (10)—
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
- Puntuación base: 10
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 26%
- Percentil entre todas las CVEs puntuadas: 98
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18342
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3577
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4846
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18342
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3577
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4846
JSON original (NVD)
Mostrar
{
"id": "CVE-2004-0900",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": true,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2005-01-10T05:00:00.000",
"references": [
{
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18342",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3577",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4846",
"source": "cve@mitre.org"
},
{
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18342",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3577",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4846",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the \"DHCP Request Vulnerability.\""
},
{
"lang": "es",
"value": "El servidor DHCP de Microsoft Windows NT 4.0 Server y Terminal Server Edition no valida adecuadamente la longitud de ciertos mensajes, lo que permite a atacantes remotos ejecutar código de su elección mediante mensajes DHCP malformados, también conocida como \"Vulnerabilidad de petición DHCP\""
}
],
"lastModified": "2026-06-16T22:06:37.610",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E53CDA8E-50A8-4509-B070-CCA5604FFB21"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:alpha:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A4FF113-BDCB-472C-A300-3DE5A12A7031"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "237D7C18-C8D6-4FDB-A160-FA17DD46A55A"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E7E6AD3-5418-4FEA-84B5-833059CA880D"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server_alpha:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5CEA2F6-0064-487D-AE4F-9C4F32E1C4AC"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BDCBCB8-DAA3-465F-ADDE-9143B8251989"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:alpha:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8E32528-4DA7-4FF8-BBA1-929C5C44FAD4"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "064F4E76-1B89-4FA5-97ED-64624285C014"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "089A953C-8446-4E6F-B506-430C38DF37B1"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA262C44-C0E6-493A-B8E5-4D26E4013226"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B86E0671-ED68-4549-B3AC-FD8BD79B0860"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:alpha:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F9C691E-CD79-4D8B-BD35-04BDE4422A4E"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F66DC6FF-2B3D-4718-838F-9E055E89961F"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "656AE014-AEEC-46E8-A696-61FEA7932F21"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB76E7EC-C396-4537-9065-4E815DA7097C"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:alpha:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EF2010D-5D16-40A7-B7DE-8168C76E5BDB"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA267420-56C5-4697-B0AA-52932F78B24B"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93BA426E-DD51-44AC-BE78-3164670FF9E1"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "224F8968-9F4C-4727-AAA3-61F5578EF54C"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CD026E2-B073-40A6-AD4A-8C76B9169B01"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:alpha:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD500955-71F7-41AD-96EE-E8CC6A7FA7A3"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "363E3895-A19B-42EC-B479-765168DC0B17"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBBBF25A-709B-4716-9894-AD82180091AD"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "407DA6E8-0832-49FE-AE14-35C104C237EC"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBFB3E49-3FB5-4947-856D-727CBFFBA543"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:alpha:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC031C07-FA91-426B-9772-64910AE12635"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81B7961D-151D-4773-80CB-CCD0456BFEAA"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82781A72-A34F-4668-9EE8-C203B04E3367"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFE612D2-DF38-404F-AED1-B8C9C24012DE"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9236480-6450-42E1-B1FF-F336488A683A"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:alpha:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D97FA0F5-6A53-4E3A-BFCF-1AFF4B83CB37"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5CAF64E-98AA-4813-A2A2-5AC3387CF230"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCDFDBBA-6C4F-472A-9F4F-461C424794E7"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCC5E316-FB61-408B-BAA2-7FE03D581250"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14F55877-A759-4C8A-84D5-70508E449799"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:alpha:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C79E6858-BB9C-4229-9DBE-8DA8627D10A4"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA7BA525-6DB8-4444-934A-932AFED69816"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90CFA69B-7814-4F97-A14D-D76310065CF3"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}