Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2003-0813
HistoryNov 17, 2003 - 5:00 a.m.

CVE-2003-0813

2003-11-1705:00:00
CWE-367
[email protected]
web.nvd.nist.gov

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

High

0.971 High

EPSS

Percentile

99.8%

JSON

A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.

Affected configurations

NVD
Node
microsoftwindows_2000sp2
OR
microsoftwindows_2000sp3
OR
microsoftwindows_2000sp4
OR
microsoftwindows_98Match-
OR
microsoftwindows_ntMatch4.0sp6aserver
OR
microsoftwindows_ntMatch4.0sp6aterminal_server
OR
microsoftwindows_server_2003x64
OR
microsoftwindows_server_2003x86
OR
microsoftwindows_xpMatch-
OR
microsoftwindows_xpMatch-sp1

References

Related

cvelist 5
cve 6
nvd 5
nessus 6
checkpoint_advisories 5
openvas 2
securityvulns 4
cert 4
saint 4
packetstorm 1
canvas 1
trendmicroblog 1
cvelist
cvelist
CVE-2003-0813
2003-10-15 04:00:00
CVE-2003-0715
2003-09-12 04:00:00
CVE-2003-0528
2003-09-12 04:00:00
cve
cve
CVE-2003-0813
2003-11-17 05:00:00
CVE-2003-0715
2003-09-17 04:00:00
CVE-2003-0528
2003-09-17 04:00:00
nvd
nvd
CVE-2003-0715
2003-09-17 04:00:00
CVE-2003-0528
2003-09-17 04:00:00
CVE-2003-0352
2003-08-18 04:00:00
nessus
nessus
MS03-026 / MS03-039: Buffer Overrun In RPCSS Service Could Allow Code Execution (823980 / 824146)
2003-07-17 00:00:00
MS03-039: Microsoft RPC Interface Buffer Overrun (824146) (uncredentialed check)
2003-09-10 00:00:00
MS03-039 Exploitation Backdoor Account Detection
2003-09-17 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows DCOM RPC Interface Buffer Overflow (MS03-026; CVE-2003-0352; CVE-2003-0715)
2007-09-07 00:00:00
Security Best Practice: Protect Yourself from DCOM vulnerabilities
2006-07-16 00:00:00
Unauthenticated DCOM SystemActivation/RemoteActivation traffic (CVE-2003-0352; CVE-2003-0605; CVE-2003-0715)
2007-09-06 00:00:00
openvas
openvas
Microsoft Windows RPC Interface Buffer Overrun Vulnerability (KB824146)
2009-11-16 00:00:00
Microsoft RPC Interface Buffer Overrun (823980)
2005-11-03 00:00:00
securityvulns
securityvulns
CERT Advisory CA-2003-23 RPCSS Vulnerabilities in Microsoft Windows
2003-09-11 00:00:00
NSFOCUS SA2003-06 : Microsoft Windows RPC DCOM Interface Heap Overflow Vulnerability
2003-09-11 00:00:00
Microsoft Security Bulletin MS04-012
2004-04-14 00:00:00
cert
cert
Microsoft Windows RPCSS Service contains heap overflow in DCOM request filename handling
2003-09-10 00:00:00
Microsoft Windows RPC vulnerable to buffer overflow
2003-07-17 00:00:00
Microsoft Windows DCOM/RPC vulnerability
2003-10-14 00:00:00
saint
saint
Windows RPC DCOM interface buffer overflow
2006-04-04 00:00:00
Windows RPC DCOM interface buffer overflow
2006-04-04 00:00:00
Windows RPC DCOM interface buffer overflow
2006-04-04 00:00:00
packetstorm
packetstorm
Microsoft RPC DCOM Interface Overflow
2009-11-26 00:00:00
canvas
canvas
Immunity Canvas: MS03_026
2003-08-18 04:00:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of April 17, 2017
2017-04-21 18:23:45

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

High

0.971 High

EPSS

Percentile

99.8%

JSON
Related for NVD:CVE-2003-0813
cvelist5cve6nvd5nessus6checkpoint_advisories5openvas2securityvulns4cert4saint4packetstorm1canvas1trendmicroblog1