CVE - CVE-2003-0605

CVE-ID
CVE-2003-0605	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20030720 Microsoft Windows 2000 RPC DCOM Interface DOS AND Privilege Escalation Vulnerability URL:http://marc.info/?l=bugtraq&m=105880332428706&w=2 CERT:CA-2003-19 URL:http://www.cert.org/advisories/CA-2003-19.html CERT:CA-2003-23 URL:http://www.cert.org/advisories/CA-2003-23.html CERT-VN:VU#326746 URL:http://www.kb.cert.org/vuls/id/326746 FULLDISC:20030721 Microsoft Windows 2000 RPC DCOM Interface DOS AND Privilege Escalation Vulnerability URL:http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006851.html MS:MS03-039 URL:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-039 OVAL:oval:org.mitre.oval:def:1118 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1118 OVAL:oval:org.mitre.oval:def:494 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A494
Assigning CNA
MITRE Corporation
Date Record Created
20030725	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20030725)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)