National Vulnerability Database (CVE-2003-0109)

National Cyber-Alert System Vulnerability Summary: CVE-2003-0109
Orirignal release date: 2003-03-31 Source: US-CERT/NIST ### Overview Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0. ### Impact CVSS Severity: 7 (High) Range: remote Authentication: input buffer="1" Impact Type: sec_prot other="1" ### Reference to Advisories, Solutions, and Tools External Source: ISS X-Force Name: Microsoft IIS WebDAV Remote Compromise Vulnerability Hyperlink: http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=22029 External Source: Microsoft Name: Unchecked Buffer In Windows Component Could Cause Web Server Compromise (815021) Hyperlink: http://www.microsoft.com/technet/security/bulletin/ms03-007.asp External Source: CERT Name: CERT Advisory CA-2003-09 Buffer Overflow in Core Microsoft Windows DLL Hyperlink: http://www.cert.org/advisories/CA-2003-09.html External Source: ISS X-Force Name: Microsoft IIS WebDAV long request buffer overflow Hyperlink: http://www.iss.net/security_center/static/11533.php External Source: Security Focus Name: bid 7116 Hyperlink: http://www.securityfocus.com/bid/7116 External Source: CONFIRM Name: amp Hyperlink: http://microsoft.com/downloads/details.aspx?FamilyId=C9A38D45-5145-4844-B62E-C69D32AC929B& External Source: MSKB Name: %5BLN%5D Hyperlink: http://support.microsoft.com/default.aspx?scid=kb External Source: MISC Name: http://www.nextgenss.com/papers/ms03-007-ntdll.pdf Hyperlink: http://www.nextgenss.com/papers/ms03-007-ntdll.pdf External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: NTBUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=ntbugtraq& External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: OVAL Name: OVAL109 Hyperlink: http://oval.mitre.org/oval/definitions/data/oval109.html External Source: CERT-VN Name: VU#117394 Hyperlink: http://www.kb.cert.org/vuls/id/117394 ### Vulnerable Software and Vendor Windows 2000 (Microsoft) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0109