Exploitation Summary
EIP tracks 3 public exploits for CVE-2004-1080.
PoCs published by Metasploit, class101, hdm, including Metasploit module exploits/windows/wins/ms04_045_wins.
AI-analyzed exploit summary This is a Metasploit module exploiting CVE-2004-1080, an arbitrary memory write flaw in the Microsoft WINS service. It targets Windows 2000 systems and achieves remote code execution by overwriting function pointers in memory.
Description
The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."
Exploits (3)
This is a Metasploit module exploiting CVE-2004-1080, an arbitrary memory write flaw in the Microsoft WINS service. It targets Windows 2000 systems and achieves remote code execution by overwriting function pointers in memory.
This exploit targets a remote heap buffer overflow in Windows Internet Name Service (WINS) on Windows 2000 SP4. It uses a reverse shell payload to achieve remote code execution by overwriting critical structures via a crafted network packet.
This Metasploit module exploits an arbitrary memory write flaw in the Microsoft WINS service (CVE-2004-1080) by sending a crafted packet to overwrite function pointers, leading to remote code execution. It includes fingerprinting to detect vulnerable systems and has been tested against Windows 2000.