high7.5Public exploit code
CVE-2003-0109
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execu…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (4)2003-03-17 · remote · windows · Verified
- Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (3)2003-04-04 · remote · windows · Verified
- Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (2)2003-03-31 · remote · windows · Verified
- Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (1)2003-03-24 · remote · windows · Verified
- Microsoft IIS 5.0 - WebDAV 'ntdll.dll' Path Overflow (MS03-007) (Metasploit)2010-07-25 · remote · windows · Verified
- Microsoft IIS 5.0 - WebDAV Remote Code Execution (3) (xwdav)2003-07-08 · remote · windows · Verified
- Microsoft Windows - WebDAV Remote Code Execution (2)2003-06-01 · remote · windows · Verified
- Microsoft IIS 5.0 - WebDAV Remote2003-03-24 · remote · windows · Verified
- Microsoft IIS - WebDAV 'ntdll.dll' Remote Overflow2003-03-23 · remote · windows · Verified
Impact
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows 2000 Terminal Services | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=104826476427372&w=2
- http://marc.info/?l=bugtraq&m=104861839130254&w=2
- http://marc.info/?l=bugtraq&m=104869293619064&w=2
- http://marc.info/?l=bugtraq&m=104887148323552&w=2
- http://marc.info/?l=bugtraq&m=105768156625699&w=2
- http://marc.info/?l=ntbugtraq&m=104826785731151&w=2
- http://microsoft.com/downloads/details.aspx?FamilyId=C9A38D45-5145-4844-B62E-C69D32AC929B&displaylang=en
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ815021
- http://www.cert.org/advisories/CA-2003-09.html
- http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=22029
- http://www.iss.net/security_center/static/11533.php
- http://www.kb.cert.org/vuls/id/117394
- http://www.nextgenss.com/papers/ms03-007-ntdll.pdf
- http://www.securityfocus.com/bid/7116
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-007
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A109