CVE-2003-0109 Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a....
HighCVSS 7.5
EPSS 85.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2000 terminal services | All versions | No fix listed |
References
- 20030321 New attack vectors and a vulnerability dissection of MS03-007 mailing-list
- 20030325 IIS 5.0 WebDAV -Proof of concept-. Fully documented. mailing-list
- 20030326 WebDAV exploit: using wide character decoder scheme mailing-list
- 20030328 Fate Research Labs Presents: Analysis of the NTDLL.DLL Exploit mailing-list
- 20030708 WDAV exploit without netcat and with pretty magic number mailing-list
- 20030321 New attack vectors and a vulnerability dissection of MS03-007 mailing-list
- microsoft.com
- Q815021 vendor-advisory
- CA-2003-09 patch third-party-advisory us-government-resource
- 20030317 Microsoft IIS WebDAV Remote Compromise Vulnerability patch third-party-advisory vendor-advisory
- http-webdav-long-request(11533) patch vdb-entry vendor-advisory
- VU#117394 third-party-advisory us-government-resource
- www.nextgenss.com
- 7116 exploit patch vdb-entry vendor-advisory
- MS03-007 vendor-advisory
- oval:org.mitre.oval:def:109 signature vdb-entry