Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2004-0206

CVSS 7.5 32 detections found
View on NVD →
Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.

Detection rules

Source Rule Status Updated
suricata GPL NETBIOS SMB nddeapi create tree attempt rev 6 2024-03-14
suricata GPL NETBIOS SMB nddeapi unicode bind attempt rev 7 2024-03-14
suricata GPL NETBIOS SMB nddeapi unicode create tree attempt rev 6 2024-03-14
suricata GPL NETBIOS SMB-DS nddeapi bind attempt rev 7 2024-03-14
suricata GPL NETBIOS SMB-DS nddeapi create tree attempt rev 6 2024-03-14
suricata GPL NETBIOS SMB-DS nddeapi unicode bind attempt rev 8 2024-03-14
suricata GPL NETBIOS SMB-DS nddeapi unicode create tree attempt rev 6 2024-03-14
suricata GPL NETBIOS SMB nddeapi bind attempt rev 7 2024-03-14
suricata GPL NETBIOS SMB NDdeSetTrustedShareW little endian overflow attempt rev 7 2019-07-26
suricata GPL NETBIOS SMB NDdeSetTrustedShareW unicode little endian overflow attempt rev 6 2019-07-26
suricata GPL NETBIOS SMB NDdeSetTrustedShareW unicode overflow attempt rev 6 2019-07-26
suricata GPL NETBIOS SMB-DS NDdeSetTrustedShareW little endian overflow attempt rev 7 2019-07-26
suricata GPL NETBIOS SMB-DS NDdeSetTrustedShareW unicode overflow attempt rev 7 2019-07-26
suricata GPL NETBIOS SMB-DS NDdeSetTrustedShareW overflow attempt rev 6 2019-07-26
suricata GPL NETBIOS SMB-DS NDdeSetTrustedShareW unicode little endian overflow attempt rev 7 2019-07-26
suricata GPL NETBIOS SMB NDdeSetTrustedShareW overflow attempt rev 6 2019-07-26
snort GPL NETBIOS SMB-DS NDdeSetTrustedShareW unicode little endian overflow attempt rev 7 2011-09-20
snort GPL NETBIOS SMB NDdeSetTrustedShareW little endian overflow attempt rev 7 2011-09-20
snort GPL NETBIOS SMB NDdeSetTrustedShareW overflow attempt rev 6 2011-09-20
snort GPL NETBIOS SMB NDdeSetTrustedShareW unicode little endian overflow attempt rev 6 2011-09-20
snort GPL NETBIOS SMB NDdeSetTrustedShareW unicode overflow attempt rev 6 2011-09-20
snort GPL NETBIOS SMB nddeapi bind attempt rev 6 2011-09-20
snort GPL NETBIOS SMB nddeapi create tree attempt rev 5 2011-09-20
snort GPL NETBIOS SMB nddeapi unicode bind attempt rev 6 2011-09-20
snort GPL NETBIOS SMB nddeapi unicode create tree attempt rev 5 2011-09-20
snort GPL NETBIOS SMB-DS NDdeSetTrustedShareW little endian overflow attempt rev 7 2011-09-20
snort GPL NETBIOS SMB-DS NDdeSetTrustedShareW unicode overflow attempt rev 7 2011-09-20
snort GPL NETBIOS SMB-DS nddeapi bind attempt rev 6 2011-09-20
snort GPL NETBIOS SMB-DS nddeapi create tree attempt rev 5 2011-09-20
snort GPL NETBIOS SMB-DS nddeapi unicode bind attempt rev 7 2011-09-20
snort GPL NETBIOS SMB-DS nddeapi unicode create tree attempt rev 5 2011-09-20
snort GPL NETBIOS SMB-DS NDdeSetTrustedShareW overflow attempt rev 6 2011-09-20