CVE-2004-0119

HIGH 7.5CVE-2004-0119 · Published 01/06/2004 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service (crash from null dereference) or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selection.

References

archives.neohapsis.com/archives/vulnwatch/2004-q1/0081.html · Broken Link
ciac.org/ciac/bulletins/o-114.shtml · Broken Link
kb.cert.org/vuls/id/638548 · Patch
securityfocus.com/bid/10113 · Broken Link
us-cert.gov/cas/techalerts/TA04-104A.html · Broken Link
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/15715 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1808 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1962 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1997 · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free