PT-2003-1770 · Watchguard+1 · Watchguard Serverlock+1

Jan K. Rutkowski

·

Publicado

2003-08-02

·

Atualizado

2017-07-11

·

CVE-2003-0641

CVSS v2.0

4.6

Média

VetorAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: WatchGuard ServerLock for Windows 2000 version before 2.0.3
Description: The issue allows local users to load arbitrary modules via the OpenProcess() function. This can be demonstrated through various methods, including a DLL injection attack, ZwSetSystemInformation, and API hooking in OpenProcess.
Recommendations: For WatchGuard ServerLock for Windows 2000 version before 2.0.3, update to version 2.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the OpenProcess() function to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2003-0641

Produtos afetados

Watchguard Serverlock
Windows 2000