PT-2003-1304 · Microsoft · Windows 2000+3

David Litchfield · Published 2003-02-07 · Updated 2019-04-30 · CVE-2003-0003

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows NT 4.0 Microsoft Windows NT 4.0 Terminal Server Edition Microsoft Windows 2000 Microsoft Windows XP

Description A buffer overflow issue exists in the RPC Locator service, allowing local users to execute arbitrary code via a specific RPC call containing certain parameter information.

Recommendations For Microsoft Windows NT 4.0, apply the necessary patch to fix the buffer overflow issue in the RPC Locator service. For Microsoft Windows NT 4.0 Terminal Server Edition, apply the necessary patch to fix the buffer overflow issue in the RPC Locator service. For Microsoft Windows 2000, apply the necessary patch to fix the buffer overflow issue in the RPC Locator service. For Microsoft Windows XP, apply the necessary patch to fix the buffer overflow issue in the RPC Locator service.

Exploit

Fix

Related Identifiers

CVE-2003-0003

Affected Products

Windows 2000

Windows Nt 4.0

Windows Nt 4.0 Terminal Server Edition

Windows Xp

References · 11

• 🔥 https://exploit-db.com/exploits/5 · Exploit
• 🔥 https://exploit-db.com/exploits/22194 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0003 · Security Note
• http://kb.cert.org/vuls/id/610986 · Patch
• http://cert.org/advisories/CA-2003-03.html · Patch
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-001 · Vendor Advisory
• http://marc.info/?l=ntbugtraq&m=104393588232166&w=2 · Note
• http://marc.info/?l=bugtraq&m=104394414713415&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11132 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A103 · Note
• http://securityfocus.com/bid/6666 · Note