Published: 15/12/2003 Updated: 30/04/2019

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 770

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Subscribe to Windows 2000

Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote malicious users to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows 2000
microsoft windows xp

/* To build new netapi32lib pedump /exp netapi32dll > netapi32exp buildlib netapi32exe netapi32exp netapi32lib netapi32dll d:\>rpc_wks_boexe WKS service remote exploit MS03-049 by fiNis (fiNis[at]bk[dot]ru), ver:011 ------------------------------------------------------------------- Usage: rpc_wks_boexe [-ht] -h <IP> ...

/* Proof of concept for MS03-049 This code was tested on a Win2K SP4 with FAT32 file system, and is supposed to work *only* with that (it will probably crash the the other 2Ks, no clue about XPs) To be compiled with lcc-win32 (*hint* link mprlib) I will not improve this public version, do not ...

## # $Id: ms03_049_netapirb 9262 2010-05-09 17:45:00Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class ...

/* * Author: snooq * Date: 14 November 2003 * * +++++++++++++ THIS IS A PRIVATE VERSION +++++++++++++++ * * This is just slightly better than the one I posted to * packetstorm * * The public version will crash 'servicesexe' immediately * while this one crash it only when u exit from shell * * I'm still trying to figur ...

NVD-CWE-Other http://www.kb.cert.org/vuls/id/567620 http://www.securityfocus.com/bid/9011 http://www.cisco.com/warp/public/707/cisco-sa-20040129-ms03-049.shtml http://www.cert.org/advisories/CA-2003-28.html http://marc.info/?l=bugtraq&m=106859247713009&w=2 http://marc.info/?l=bugtraq&m=106865197102041&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A575 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A331 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-049 https://nvd.nist.gov https://www.exploit-db.com/exploits/130/https://www.kb.cert.org/vuls/id/567620

CVE-2003-0812

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect