CVE-2003-0352 Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by th...
HighCVSS 7.5
EPSS 98.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = enterprise | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = standard | No fix listed |
| Microsoft windows 2003 server | = web | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
| Microsoft windows nt | = 4.0-sp1 | No fix listed |
| Microsoft windows nt | = 4.0-sp2 | No fix listed |
| Microsoft windows nt | = 4.0-sp3 | No fix listed |
| Microsoft windows nt | = 4.0-sp4 | No fix listed |
| Microsoft windows nt | = 4.0-sp5 | No fix listed |
| Microsoft windows nt | = 4.0-sp6 | No fix listed |
| Microsoft windows nt | = 4.0-sp6a | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20030726 Re: The French BUGTRAQ (New Win RPC Exploit) mailing-list
- 20030730 rpcdcom Universal offsets mailing-list
- 20030716 [LSD] Critical security vulnerability in Microsoft Operating Systems mailing-list
- 20030725 The Analysis of LSD's Buffer Overrun in Windows RPC Interface(code revised ) mailing-list
- CA-2003-16 third-party-advisory us-government-resource
- CA-2003-19 third-party-advisory us-government-resource
- VU#568148 third-party-advisory us-government-resource
- 8205 exploit patch vdb-entry vendor-advisory
- www.xfocus.org
- MS03-026 vendor-advisory
- win-rpc-dcom-bo(12629) vdb-entry
- oval:org.mitre.oval:def:194 signature vdb-entry
- oval:org.mitre.oval:def:2343 signature vdb-entry
- oval:org.mitre.oval:def:296 signature vdb-entry