PT-2003-1555 · Microsoft · Windows 2000+3

Lsd · Published 2003-07-17 · Updated 2024-02-15 · CVE-2003-0352

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Windows NT 4.0, 2000, XP, and Server 2003

Description: A buffer overflow issue in a certain DCOM interface for RPC allows remote attackers to execute arbitrary code via a malformed message. This issue has been exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.

Recommendations: For Microsoft Windows NT 4.0, apply the available patch to fix the issue. For Microsoft Windows 2000, apply the available patch to fix the issue. For Microsoft Windows XP, apply the available patch to fix the issue. For Microsoft Windows Server 2003, apply the available patch to fix the issue.

Exploit

Fix

Related Identifiers

CVE-2003-0352

Affected Products

Windows 2000

Windows Nt 4.0

Windows Server 2003

Windows Xp

References · 20

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/dcerpc/ms03_026_dcom.rb · Exploit
• 🔥 https://exploit-db.com/exploits/22917 · Exploit
• 🔥 https://exploit-db.com/exploits/16749 · Exploit
• 🔥 http://securityfocus.com/bid/8205 · Exploit
• 🔥 https://exploit-db.com/exploits/100 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0352 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-026 · Vendor Advisory
• http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007357.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2343 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007079.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12629 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A194 · Note
• http://xfocus.org/documents/200307/2.html · Note
• http://kb.cert.org/vuls/id/568148 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A296 · Note