[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2003-0352Date: (C)2003-08-18   (M)2023-12-22


Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.5
Exploit Score: 10.0
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
http://marc.info/?l=bugtraq&m=105838687731618&w=2
http://marc.info/?l=bugtraq&m=105914789527294&w=2
http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007079.html
http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007357.html
BID-8205
CA-2003-16
CA-2003-19
MS03-026
VU#568148
http://www.xfocus.org/documents/200307/2.html
win-rpc-dcom-bo(12629)

CPE    38
cpe:/o:microsoft:windows_nt:4.0:sp6:server
cpe:/o:microsoft:windows_nt:4.0:sp4:server
cpe:/o:microsoft:windows_nt:4.0:sp5:server
cpe:/o:microsoft:windows_nt:4.0:sp3:server
...
OVAL    3
oval:org.mitre.oval:def:296
oval:org.mitre.oval:def:194
oval:org.mitre.oval:def:2343

© SecPod Technologies