Lucene search

[email protected]CVE-2003-0641

HistoryAug 27, 2003 - 4:00 a.m.

CVE-2003-0641

2003-08-2704:00:00

[email protected]

web.nvd.nist.gov

cve-2003-0641

watchguard

serverlock

windows 2000

security vulnerability

dll injection

api hooking

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

WatchGuard ServerLock for Windows 2000 before SL 2.0.3 allows local users to load arbitrary modules via the OpenProcess() function, as demonstrated using (1) a DLL injection attack, (2) ZwSetSystemInformation, and (3) API hooking in OpenProcess.

Affected configurations

NVD

Node

watchguardserverlockMatch2.0

watchguardserverlockMatch2.0.1

watchguardserverlockMatch2.0.2

CPENameOperatorVersion
watchguard:serverlockwatchguard serverlockeq2.0
watchguard:serverlockwatchguard serverlockeq2.0.1
watchguard:serverlockwatchguard serverlockeq2.0.2

CPE	Name	Operator	Version
watchguard:serverlock	watchguard serverlock	eq	2.0
watchguard:serverlock	watchguard serverlock	eq	2.0.1
watchguard:serverlock	watchguard serverlock	eq	2.0.2

References

marc.info/?l=bugtraq&m=105848106631132&w=2

secunia.com/advisories/9310

www.osvdb.org/6578

www.securityfocus.com/bid/8222

exchange.xforce.ibmcloud.com/vulnerabilities/12665

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2003-0641

cvelist1 nvd1