CVE-2004-0899
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with...
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability."
- Record
CVE-2004-0899- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability."
- Record
CVE-2004-0899- Updated
- 2026-11-02
EUVDEUVD-2004-0897 No score
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability."
- Record
EUVD-2004-0897- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8837-mqmw-p5pc No score
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with...
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability."
- Record
GHSA-8837-mqmw-p5pc- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0899 is a medium vulnerability (CVSS 5.0) in Microsoft Windows Nt, published December 15, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 72.6%, the 99th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/18341
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4282
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042
nvd.nist.gov/vuln/detail/CVE-2004-0899
github.com/advisories/GHSA-8837-mqmw-p5pc