CVE-2004-0900
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not...
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."
- Record
CVE-2004-0900- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."
- Record
CVE-2004-0900- Updated
- 2026-11-02
EUVDEUVD-2004-0898 No score
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."
- Record
EUVD-2004-0898- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f43w-x8w6-2hjv No score
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not...
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."
- Record
GHSA-f43w-x8w6-2hjv- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0900 is a high vulnerability (CVSS 10.0) in Microsoft Windows Nt, published December 15, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 26.0%, the 97th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3577
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042
exchange.xforce.ibmcloud.com/vulnerabilities/18342
nvd.nist.gov/vuln/detail/CVE-2004-0900
github.com/advisories/GHSA-f43w-x8w6-2hjv