PT-2003-1304 · Microsoft · Windows 2000+3

David Litchfield · Publicado 2003-02-07 · Atualizado 2019-04-30 · CVE-2003-0003

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows NT 4.0 Microsoft Windows NT 4.0 Terminal Server Edition Microsoft Windows 2000 Microsoft Windows XP

Description A buffer overflow issue exists in the RPC Locator service, allowing local users to execute arbitrary code via a specific RPC call containing certain parameter information.

Recommendations For Microsoft Windows NT 4.0, apply the necessary patch to fix the buffer overflow issue in the RPC Locator service. For Microsoft Windows NT 4.0 Terminal Server Edition, apply the necessary patch to fix the buffer overflow issue in the RPC Locator service. For Microsoft Windows 2000, apply the necessary patch to fix the buffer overflow issue in the RPC Locator service. For Microsoft Windows XP, apply the necessary patch to fix the buffer overflow issue in the RPC Locator service.

Exploit

Correção

Identificadores relacionados

CVE-2003-0003

Produtos afetados

Windows 2000

Windows Nt 4.0

Windows Nt 4.0 Terminal Server Edition

Windows Xp

Referências · 11

• 🔥 https://exploit-db.com/exploits/5 · Exploit
• 🔥 https://exploit-db.com/exploits/22194 · Exploit
• http://marc.info/?l=ntbugtraq&m=104393588232166&w=2 · Nota
• http://marc.info/?l=bugtraq&m=104394414713415&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11132 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0003 · Nota de Segurança
• http://kb.cert.org/vuls/id/610986 · Correção
• http://cert.org/advisories/CA-2003-03.html · Correção
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A103 · Nota
• http://securityfocus.com/bid/6666 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-001 · Aviso do Fabricante