VulnerabilityModified
CVE-2003-0109
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.
HIGH 7.5EPSS 85.7%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 85.7%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 85.68% probability · 100th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/windows 2000 · microsoft/windows 2000 terminal services
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=104826476427372&w=2
- http://marc.info/?l=bugtraq&m=104861839130254&w=2
- http://marc.info/?l=bugtraq&m=104869293619064&w=2
- http://marc.info/?l=bugtraq&m=104887148323552&w=2
- http://marc.info/?l=bugtraq&m=105768156625699&w=2
- http://marc.info/?l=ntbugtraq&m=104826785731151&w=2
- http://microsoft.com/downloads/details.aspx?FamilyId=C9A38D45-5145-4844-B62E-C69D32AC929B&displaylang=en
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ815021
- http://www.cert.org/advisories/CA-2003-09.htmlPatch, Third Party Advisory, US Government Resource
- http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=22029Patch, Vendor Advisory
- http://www.iss.net/security_center/static/11533.phpPatch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/117394US Government Resource
- http://www.nextgenss.com/papers/ms03-007-ntdll.pdf
- http://www.securityfocus.com/bid/7116Exploit, Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-007
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A109
- http://marc.info/?l=bugtraq&m=104826476427372&w=2
- http://marc.info/?l=bugtraq&m=104861839130254&w=2
- http://marc.info/?l=bugtraq&m=104869293619064&w=2
- http://marc.info/?l=bugtraq&m=104887148323552&w=2
- http://marc.info/?l=bugtraq&m=105768156625699&w=2
- http://marc.info/?l=ntbugtraq&m=104826785731151&w=2
- http://microsoft.com/downloads/details.aspx?FamilyId=C9A38D45-5145-4844-B62E-C69D32AC929B&displaylang=en
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ815021
- http://www.cert.org/advisories/CA-2003-09.htmlPatch, Third Party Advisory, US Government Resource
- http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=22029Patch, Vendor Advisory
- http://www.iss.net/security_center/static/11533.phpPatch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/117394US Government Resource
- http://www.nextgenss.com/papers/ms03-007-ntdll.pdf
- http://www.securityfocus.com/bid/7116Exploit, Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.