high7.5Public exploit code
CVE-2003-0812
Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Workstation Service - NetAddAlternateComputerName Overflow (MS03-049) (Metasploit)2010-05-09 · remote · windows · Verified
- Microsoft Windows XP - Workstation Service Remote (MS03-049)2003-12-04 · remote · windows · Verified
- Microsoft Windows - Workstation Service WKSSVC Remote (MS03-049)2003-11-14 · remote · windows · Verified
- Microsoft Windows XP/2000 - Workstation Service Overflow (MS03-049)2003-11-12 · remote · windows · Verified
Impact
Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows Xp | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=106859247713009&w=2
- http://marc.info/?l=bugtraq&m=106865197102041&w=2
- http://www.cert.org/advisories/CA-2003-28.html
- http://www.cisco.com/warp/public/707/cisco-sa-20040129-ms03-049.shtml
- http://www.kb.cert.org/vuls/id/567620
- http://www.securityfocus.com/bid/9011
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-049
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A331
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A575