[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249622

 
 

909

 
 

195549

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2003-0812Date: (C)2003-12-15   (M)2023-12-22


Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.5
Exploit Score: 10.0
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
http://marc.info/?l=bugtraq&m=106859247713009&w=2
http://marc.info/?l=bugtraq&m=106865197102041&w=2
http://www.cisco.com/warp/public/707/cisco-sa-20040129-ms03-049.shtml
BID-9011
CA-2003-28
MS03-049
VU#567620

CPE    18
cpe:/o:microsoft:windows_2000::sp4:advanced_server
cpe:/o:microsoft:windows_2000::sp1:advanced_server
cpe:/o:microsoft:windows_2000::sp2:datacenter_server
cpe:/o:microsoft:windows_2000::sp3:professional
...
OVAL    2
oval:org.mitre.oval:def:331
oval:org.mitre.oval:def:575

© SecPod Technologies