CVEvulnerability
CVE-2003-0109
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-03-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.
Affected configurations
• microsoft windows 2000
• microsoft windows 2000 terminal services
References
- http://marc.info/?l=bugtraq&m=104826476427372&w=2 marc.info
- http://marc.info/?l=bugtraq&m=104861839130254&w=2 marc.info
- http://marc.info/?l=bugtraq&m=104869293619064&w=2 marc.info
- http://marc.info/?l=bugtraq&m=104887148323552&w=2 marc.info
- http://marc.info/?l=bugtraq&m=105768156625699&w=2 marc.info
- http://marc.info/?l=ntbugtraq&m=104826785731151&w=2 marc.info
- http://microsoft.com/downloads/details.aspx?FamilyId=C9A38D45-5145-4844-B62E-C69D32AC929B&displaylang=en microsoft.com
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ815021 support.microsoft.com
- http://www.cert.org/advisories/CA-2003-09.html Patch, Third Party Advisory, US Government Resource
- http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=22029 Patch, Vendor Advisory
- http://www.iss.net/security_center/static/11533.php Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/117394 US Government Resource
- http://www.nextgenss.com/papers/ms03-007-ntdll.pdf www.nextgenss.com
- http://www.securityfocus.com/bid/7116 Exploit, Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-007 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A109 oval.cisecurity.org
- http://marc.info/?l=bugtraq&m=104826476427372&w=2 marc.info
- http://marc.info/?l=bugtraq&m=104861839130254&w=2 marc.info
- http://marc.info/?l=bugtraq&m=104869293619064&w=2 marc.info
- http://marc.info/?l=bugtraq&m=104887148323552&w=2 marc.info
- http://marc.info/?l=bugtraq&m=105768156625699&w=2 marc.info
- http://marc.info/?l=ntbugtraq&m=104826785731151&w=2 marc.info
- http://microsoft.com/downloads/details.aspx?FamilyId=C9A38D45-5145-4844-B62E-C69D32AC929B&displaylang=en microsoft.com
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ815021 support.microsoft.com
- http://www.cert.org/advisories/CA-2003-09.html Patch, Third Party Advisory, US Government Resource
- http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=22029 Patch, Vendor Advisory
- http://www.iss.net/security_center/static/11533.php Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/117394 US Government Resource
- http://www.nextgenss.com/papers/ms03-007-ntdll.pdf www.nextgenss.com
- http://www.securityfocus.com/bid/7116 Exploit, Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-007 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A109 oval.cisecurity.org