PT-2003-1371 · Microsoft · Windows 2000+5

Nesumin · Published 2003-03-18 · Updated 2019-04-30 · CVE-2003-0109

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows NT 4.0 Microsoft Windows NT 4.0 Terminal Server Edition Microsoft Windows 2000 Microsoft Windows XP

Description A buffer overflow issue in the ntdll.dll component allows remote attackers to execute arbitrary code. This can be achieved through a WebDAV request to IIS 5.0.

Recommendations For Microsoft Windows NT 4.0, apply the necessary security patches to fix the buffer overflow issue in ntdll.dll. For Microsoft Windows NT 4.0 Terminal Server Edition, apply the necessary security patches to fix the buffer overflow issue in ntdll.dll. For Microsoft Windows 2000, apply the necessary security patches to fix the buffer overflow issue in ntdll.dll. For Microsoft Windows XP, apply the necessary security patches to fix the buffer overflow issue in ntdll.dll.

Exploit

Fix

Related Identifiers

CVE-2003-0109

Affected Products

Iis 5.0

Windows 2000

Windows Nt 4.0

Windows Nt 4.0 Terminal Server Edition

Windows Xp

Ntdll.Dll

References · 27

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/iis/ms03_007_ntdll_webdav.rb · Exploit
• 🔥 https://exploit-db.com/exploits/22365 · Exploit
• 🔥 https://exploit-db.com/exploits/22366 · Exploit
• 🔥 https://exploit-db.com/exploits/22367 · Exploit
• 🔥 https://exploit-db.com/exploits/36 · Exploit
• 🔥 https://exploit-db.com/exploits/2 · Exploit
• 🔥 http://securityfocus.com/bid/7116 · Exploit
• 🔥 https://exploit-db.com/exploits/51 · Exploit
• 🔥 https://exploit-db.com/exploits/16470 · Exploit
• 🔥 https://exploit-db.com/exploits/1 · Exploit
• 🔥 https://exploit-db.com/exploits/22368 · Exploit
• http://iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=22029 · Vendor Advisory
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ815021 · Vendor Advisory
• http://cert.org/advisories/CA-2003-09.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2003-0109 · Security Note