What’s Vulnerable › Vulnerabilities

CVE-2004-0728

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 24.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-07-27 · updated 2026-06-16

Description

The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of service (crash) via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address.

Affected products

• Microsoft Systems Management Server: 1.2, 1.2-sp1, 1.2-sp2, 1.2-sp3, 1.2-sp4, 2.0 (+2)

References

• http://marc.info/?l=bugtraq&m=108983763710315&w=2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16696
• http://marc.info/?l=bugtraq&m=108983763710315&w=2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16696

Get alerted when CVE-2004-0728 or the next vulnerability affects your stack