Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

Windows NT/2000/XP/Server 2003 may leak memory data

CVE-2003-0661 · published 23 years ago
Summary

The name‑resolution service used by Windows (NetBIOS over TCP/IP) can accidentally include bits of the computer’s memory in its replies. An attacker on the same network could capture these replies and see information that should be private. Apply Microsoft’s security updates for the affected Windows versions or disable NetBIOS over TCP/IP if it is not needed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
microsoft windows_2000 All versions
cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
microsoft windows_2003_server enterprise
enterprise_64-bit
r2
standard
web
cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*
microsoft windows_nt 4.0
cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*
microsoft windows_xp All versions
cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*
Original advisory text
The NetBT Name Service (NBNS) for NetBIOS in Windows NT 4.0, 2000, XP, and Server 2003 may include random memory in a response to a NBNS query, which could allow remote attackers to obtain sensitiv...
The NetBT Name Service (NBNS) for NetBIOS in Windows NT 4.0, 2000, XP, and Server 2003 may include random memory in a response to a NBNS query, which could allow remote attackers to obtain sensitive information.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
25% chance of attack within 30 days
Timeline
Published20 Oct 2003
Updated29 Sep 2026
First seen29 Sep 2026
Sources
CVE-2003-0661 · NVD
Track software like this
Free during beta