CVE-2007-1748 Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to...
HighCVSS 10.0
EPSS 77.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = sp1 | No fix listed |
| Microsoft windows 2003 server | = sp2 | No fix listed |
References
- blogs.technet.com
- metasploit.com
- 24871 third-party-advisory vendor-advisory
- VU#555920 third-party-advisory us-government-resource
- www.microsoft.com vendor-advisory
- 20070415 Re: [exploits] RPC vuln in DNS Server (fwd) mailing-list
- HPSBST02214 vendor-advisory
- 23470 vdb-entry
- 1017910 vdb-entry
- TA07-103A third-party-advisory us-government-resource
- TA07-128A third-party-advisory us-government-resource
- ADV-2007-1366 vdb-entry vendor-advisory
- MS07-029 vendor-advisory
- win-dns-rpc-bo(33629) vdb-entry
- oval:org.mitre.oval:def:1228 signature vdb-entry