CVE-2003-1121 Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, which allows remote attackers to (1) modify arbitrary registry entries via the Scri...
HighCVSS 10.0
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, which allows remote attackers to (1) modify arbitrary registry entries via the ScriptLogic RPC service (SLRPC) or (2) modify arbitrary configuration via the RunAdmin services (SLRAserver.exe and SLRAclient.exe).
Affected products
No affected product data has been published yet.
References
- VU#231705 third-party-advisory us-government-resource
- VU#609137 third-party-advisory us-government-resource
- www.kb.cert.org third-party-advisory us-government-resource
- www.kb.cert.org third-party-advisory us-government-resource
- 7475 patch vdb-entry
- 7477 patch vdb-entry
- scriptlogic-rpc-modify-registry(11920) vdb-entry
- scriptlogic-runadmin-admin-access(11921) vdb-entry