PT-2003-1371 · Microsoft · Windows 2000+5

Nesumin · Publicado 2003-03-18 · Atualizado 2019-04-30 · CVE-2003-0109

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows NT 4.0 Microsoft Windows NT 4.0 Terminal Server Edition Microsoft Windows 2000 Microsoft Windows XP

Description A buffer overflow issue in the ntdll.dll component allows remote attackers to execute arbitrary code. This can be achieved through a WebDAV request to IIS 5.0.

Recommendations For Microsoft Windows NT 4.0, apply the necessary security patches to fix the buffer overflow issue in ntdll.dll. For Microsoft Windows NT 4.0 Terminal Server Edition, apply the necessary security patches to fix the buffer overflow issue in ntdll.dll. For Microsoft Windows 2000, apply the necessary security patches to fix the buffer overflow issue in ntdll.dll. For Microsoft Windows XP, apply the necessary security patches to fix the buffer overflow issue in ntdll.dll.

Exploit

Correção

Identificadores relacionados

CVE-2003-0109

Produtos afetados

Iis 5.0

Windows 2000

Windows Nt 4.0

Windows Nt 4.0 Terminal Server Edition

Windows Xp

Ntdll.Dll

Referências · 27

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/iis/ms03_007_ntdll_webdav.rb · Exploit
• 🔥 https://exploit-db.com/exploits/22365 · Exploit
• 🔥 https://exploit-db.com/exploits/22366 · Exploit
• 🔥 https://exploit-db.com/exploits/22367 · Exploit
• 🔥 https://exploit-db.com/exploits/36 · Exploit
• 🔥 https://exploit-db.com/exploits/2 · Exploit
• 🔥 http://securityfocus.com/bid/7116 · Exploit
• 🔥 https://exploit-db.com/exploits/51 · Exploit
• 🔥 https://exploit-db.com/exploits/16470 · Exploit
• 🔥 https://exploit-db.com/exploits/1 · Exploit
• 🔥 https://exploit-db.com/exploits/22368 · Exploit
• http://iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=22029 · Aviso do Fabricante
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ815021 · Aviso do Fabricante
• http://cert.org/advisories/CA-2003-09.html · Correção
• http://microsoft.com/downloads/details.aspx?FamilyId=C9A38D45-5145-4844-B62E-C69D32AC929B&displaylang=en · Nota