VDB
CVE-2005-0045
CVE-2005-0045
PUBLISHED
CVSS 7.5 HIGH
The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the "Server Message Block Vulnerability," and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields.
EPSS 83.85% · 99.3th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
83.85%
99.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| microsoft | windows_2000 | |
| microsoft | windows_nt | 4.0, 4.0, 4.0 |
| microsoft | windows_xp | |
| n/a | n/a | * |
| microsoft | windows_2003_server | standard, web, enterprise |
Timeline
- Feb 8, 2005 CVE Published
- Sep 23, 2010 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
- Oct 30, 2023 EPSS Score
References
- 20050209 EEYE: Windows SMB Client Transaction Response Handling Vulnerability mailing-list
- oval:org.mitre.oval:def:4043 vdb
- win-smb-code-execution(19089) vdb
- 20050209 EEYE: Windows SMB Client Transaction Response Handling Vulnerability mailing-list
- oval:org.mitre.oval:def:1606 vdb
- 12484 vdb
- TA05-039A third-party-advisory
- oval:org.mitre.oval:def:1889 vdb
- VU#652537 third-party-advisory
- oval:org.mitre.oval:def:1847 vdb
- 20050309 Update: MS05-011 EEYE: Windows SMB Client Transaction Response Handling Vulnerability mailing-list
- MS05-011 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2005-0045 advisory