PT-2003-2352 · Microsoft · Cmd.Exe+1

3Apa3A · Publicado 2003-12-31 · Atualizado 2017-07-29 · CVE-2003-1407

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows NT 4.0

Description A buffer overflow issue in cmd.exe may allow local users to execute arbitrary code via a long pathname argument to the cd command.

Recommendations For Windows NT 4.0, apply the necessary patch or update to fix the buffer overflow issue in cmd.exe.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2003-1407

Produtos afetados

Windows Nt 4.0

Cmd.Exe

Referências · 6

• 🔥 http://securityfocus.com/archive/1/311359 · Exploit
• 🔥 https://exploit-db.com/exploits/22245 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1407 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11329 · Nota
• http://securityreason.com/securityalert/3251 · Nota
• http://securityfocus.com/bid/6829 · Nota