PT-2003-1555 · Microsoft · Windows 2000+3

Lsd · Publicado 2003-07-17 · Atualizado 2024-02-15 · CVE-2003-0352

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Windows NT 4.0, 2000, XP, and Server 2003

Description: A buffer overflow issue in a certain DCOM interface for RPC allows remote attackers to execute arbitrary code via a malformed message. This issue has been exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.

Recommendations: For Microsoft Windows NT 4.0, apply the available patch to fix the issue. For Microsoft Windows 2000, apply the available patch to fix the issue. For Microsoft Windows XP, apply the available patch to fix the issue. For Microsoft Windows Server 2003, apply the available patch to fix the issue.

Exploit

Correção

Identificadores relacionados

CVE-2003-0352

Produtos afetados

Windows 2000

Windows Nt 4.0

Windows Server 2003

Windows Xp

Referências · 20

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/dcerpc/ms03_026_dcom.rb · Exploit
• 🔥 https://exploit-db.com/exploits/22917 · Exploit
• 🔥 https://exploit-db.com/exploits/16749 · Exploit
• 🔥 http://securityfocus.com/bid/8205 · Exploit
• 🔥 https://exploit-db.com/exploits/100 · Exploit
• http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007357.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2343 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007079.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0352 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12629 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A194 · Nota
• http://xfocus.org/documents/200307/2.html · Nota
• http://kb.cert.org/vuls/id/568148 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-026 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A296 · Nota