Multiple Vulnerabilities in Microsoft Windows NT 4.0 DHCP

Two vulnerabilities exist in DHCP, the more serious of which could result in the execution of arbitrary code on the vulnerable system.

Ken Pfeil

December 17, 2004

1 Min Read
ITPro Today logo

Reported December 14, 2004, byMicrosoft

VERSIONS AFFECTED

·         Microsoft Windows NT Server 4.0 Service Pack 6a

·         Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6

DESCRIPTION
Two vulnerabilities exist in DHCP, the more serious of which could result inthe execution of arbitrary code on the vulnerable system. A potential attackerwho successfully exploited the more severe of these vulnerabilities could takecomplete control of an affected system, including installing programs; viewing,changing, or deleting data; or creating new accounts that have full privileges.

VENDOR RESPONSE
Microsoft has released SecurityBulletin MS04-042, "Vulnerability in DHCP Could Allow RemoteCode Execution and Denial of Service (885249)," to address thesevulnerabilities and recommends that affected users immediately apply theappropriate patch listed in the bulletin.

CREDIT
Discovered by Kostya Kortchinskyfrom CERT RENATER.

Read more about:

Microsoft
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like