CVE-2003-0605 The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via....
HighCVSS 7.5
EPSS 58.8%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
References
- 20030721 Microsoft Windows 2000 RPC DCOM Interface DOS AND Privilege Escalation Vulnerability mailing-list
- 20030720 Microsoft Windows 2000 RPC DCOM Interface DOS AND Privilege Escalation Vulnerability mailing-list
- CA-2003-19 third-party-advisory us-government-resource
- CA-2003-23 third-party-advisory us-government-resource
- VU#326746 third-party-advisory us-government-resource
- MS03-039 vendor-advisory
- oval:org.mitre.oval:def:1118 signature vdb-entry
- oval:org.mitre.oval:def:494 signature vdb-entry