Lucene search

[email protected]CVE-2003-0003

HistorySep 01, 2004 - 4:00 a.m.

CVE-2003-0003

2004-09-0104:00:00

[email protected]

web.nvd.nist.gov

cve-2003-0003

buffer overflow

rpc locator

windows nt 4.0

windows 2000

windows xp

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.1%

JSON

Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.

Affected configurations

NVD

Node

microsoftwindows_2000_terminal_servicesMatch-

microsoftwindows_2000

microsoftwindows_2000sp1

microsoftwindows_2000sp2

microsoftwindows_2000sp3

microsoftwindows_2000_terminal_servicessp1

microsoftwindows_2000_terminal_servicessp2

microsoftwindows_2000_terminal_servicesMatch-sp3

microsoftwindows_ntMatch4.0enterprise_server

microsoftwindows_ntMatch4.0server

microsoftwindows_ntMatch4.0terminal_server

microsoftwindows_ntMatch4.0workstation

microsoftwindows_ntMatch4.0sp1enterprise_server

microsoftwindows_ntMatch4.0sp1server

microsoftwindows_ntMatch4.0sp1terminal_server

microsoftwindows_ntMatch4.0sp1workstation

microsoftwindows_ntMatch4.0sp2enterprise_server

microsoftwindows_ntMatch4.0sp2server

microsoftwindows_ntMatch4.0sp2terminal_server

microsoftwindows_ntMatch4.0sp2workstation

microsoftwindows_ntMatch4.0sp3enterprise_server

microsoftwindows_ntMatch4.0sp3server

microsoftwindows_ntMatch4.0sp3terminal_server

microsoftwindows_ntMatch4.0sp3workstation

microsoftwindows_ntMatch4.0sp4enterprise_server

microsoftwindows_ntMatch4.0sp4server

microsoftwindows_ntMatch4.0sp4terminal_server

microsoftwindows_ntMatch4.0sp4workstation

microsoftwindows_ntMatch4.0sp5enterprise_server

microsoftwindows_ntMatch4.0sp5server

microsoftwindows_ntMatch4.0sp5terminal_server

microsoftwindows_ntMatch4.0sp5workstation

microsoftwindows_ntMatch4.0sp6enterprise_server

microsoftwindows_ntMatch4.0sp6server

microsoftwindows_ntMatch4.0sp6terminal_server

microsoftwindows_ntMatch4.0sp6workstation

microsoftwindows_ntMatch4.0sp6aenterprise_server

microsoftwindows_ntMatch4.0sp6aserver

microsoftwindows_ntMatch4.0sp6aterminal_server

microsoftwindows_ntMatch4.0sp6aworkstation

microsoftwindows_xphome

microsoftwindows_xpgoldprofessional

microsoftwindows_xpsp1home

microsoftwindows_xpMatch-64-bit

microsoftwindows_xpMatch-sp164-bit

CPENameOperatorVersion
microsoft:windows_2000_terminal_servicesmicrosoft windows 2000 terminal serviceseq-
microsoft:windows_2000microsoft windows 2000eq*
microsoft:windows_2000_terminal_servicesmicrosoft windows 2000 terminal serviceseq*
microsoft:windows_ntmicrosoft windows nteq4.0
microsoft:windows_xpmicrosoft windows xpeq*
microsoft:windows_xpmicrosoft windows xpeq-

CPE	Name	Operator	Version
microsoft:windows_2000_terminal_services	microsoft windows 2000 terminal services	eq	-
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:windows_2000_terminal_services	microsoft windows 2000 terminal services	eq	*
microsoft:windows_nt	microsoft windows nt	eq	4.0
microsoft:windows_xp	microsoft windows xp	eq	*
microsoft:windows_xp	microsoft windows xp	eq	-

References

marc.info/?l=bugtraq&m=104394414713415&w=2

marc.info/?l=ntbugtraq&m=104393588232166&w=2

www.cert.org/advisories/CA-2003-03.html

www.kb.cert.org/vuls/id/610986

www.securityfocus.com/bid/6666

docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-001

exchange.xforce.ibmcloud.com/vulnerabilities/11132

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A103

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.1%

JSON

Related for CVE-2003-0003

nessus1 cert1 nvd1 canvas1 cvelist1