CVE-2004-0900 in the critical feed json
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain me…
published 2004-12-15 21 y ago modified 2026-06-16 4 mo ago also EUVD-2004-0898
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 26.0%
- EPSS 26.0% chance of exploitation in 30 days, percentile 97%
- public exploits
- 0
- none known
Summary
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."
Exploit prediction
26.04% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2004/ms04-042
vendor-advisory
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3577
vdb-entry, signature
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4846
vdb-entry, signature
-
exchange.xforce.ibmcloud.com
/vulnerabilities/18342
vdb-entry
Sources
- CVE List CVE-2004-0900
- NVD CVE-2004-0900
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.