CVE-2003-0003 Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC ca...
HighCVSS 7.5
EPSS 43.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 terminal services | All versions | No fix listed |
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
| Microsoft windows nt | = 4.0-sp1 | No fix listed |
| Microsoft windows nt | = 4.0-sp2 | No fix listed |
| Microsoft windows nt | = 4.0-sp3 | No fix listed |
| Microsoft windows nt | = 4.0-sp4 | No fix listed |
| Microsoft windows nt | = 4.0-sp5 | No fix listed |
| Microsoft windows nt | = 4.0-sp6 | No fix listed |
| Microsoft windows nt | = 4.0-sp6a | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20030130 Microsoft RPC Locator Buffer Overflow Vulnerability (#NISR29012003) mailing-list third-party-advisory
- 20030130 Microsoft RPC Locator Buffer Overflow Vulnerability (#NISR29012003) mailing-list third-party-advisory
- CA-2003-03 patch third-party-advisory us-government-resource
- VU#610986 patch third-party-advisory us-government-resource
- 6666 third-party-advisory vdb-entry
- MS03-001 vendor-advisory
- win-locator-bo(11132) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:103 signature third-party-advisory vdb-entry