PT-2003-2075 · Scriptlogic · Scriptlogic

Art Manion + 2 · Published 2003-12-31 · Updated 2017-07-11 · CVE-2003-1121

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ScriptLogic versions prior to 4.14

Description The issue allows remote attackers to modify arbitrary registry entries via the ScriptLogic RPC service or modify arbitrary configuration via the RunAdmin services. This is due to services processing client requests at raised privileges.

Recommendations For versions prior to 4.14, update to version 4.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the ScriptLogic RPC service and the RunAdmin services (SLRAserver.exe and SLRAclient.exe) to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2003-1121

Affected Products

Scriptlogic

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2003-1121 · Security Note
• http://securityfocus.com/bid/7475 · Patch
• http://securityfocus.com/bid/7477 · Patch
• http://kb.cert.org/vuls/id/609137 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11920 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11921 · Note
• http://kb.cert.org/vuls/id/CRDY-5EXQRP · Note
• http://kb.cert.org/vuls/id/231705 · Note
• http://kb.cert.org/vuls/id/CRDY-5EXQSV · Note