National Vulnerability Database (CVE-2003-0813)

National Cyber-Alert System Vulnerability Summary: CVE-2003-0813
Orirignal release date: 2003-11-17 Source: US-CERT/NIST ### Overview A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities. ### Impact CVSS Severity: 8 (High) Range: remote Authentication: race Impact Type: avail,sec_prot other="1" ### Reference to Advisories, Solutions, and Tools External Source: CERT Name: Microsoft Windows DCOM/RPC vulnerability Hyperlink: http://www.kb.cert.org/vuls/id/547820 External Source: ISS X-Force Name: Microsoft RPC Race Condition Denial of Service Hyperlink: http://xforce.iss.net/xforce/alerts/id/155 External Source: Netsys.com Name: BAD news on RPC DCOM Exploit Hyperlink: http://lists.netsys.com/pipermail/full-disclosure/2003-October/011870.html External Source: Bugtraq Name: m=106579825211708& Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: NTBUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=ntbugtraq& External Source: FULLDISC Name: 20031010 Re : [VERY] BAD news on RPC DCOM Exploit Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011870.html External Source: FULLDISC Name: 20031010 Re: Bad news on RPC DCOM vulnerability Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011886.html External Source: MISC Name: http://www.securitylab.ru/_exploits/rpc2.c.txt Hyperlink: http://www.securitylab.ru/_exploits/rpc2.c.txt External Source: FULLDISC Name: 20031011 Bad news on RPC DCOM2 vulnerability Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011901.html External Source: CERT Name: TA04-104A Hyperlink: http://www.us-cert.gov/cas/techalerts/TA04-104A.html External Source: OVAL Name: OVAL893 Hyperlink: http://oval.mitre.org/oval/definitions/data/oval893.html External Source: OVAL Name: OVAL894 Hyperlink: http://oval.mitre.org/oval/definitions/data/oval894.html External Source: OVAL Name: OVAL900 Hyperlink: http://oval.mitre.org/oval/definitions/data/oval900.html External Source: BID Name: 8811 Hyperlink: http://www.securityfocus.com/bid/8811 ### Vulnerable Software and Vendor Windows XP (Microsoft) Windows 2000 (Microsoft) Windows Server 2003 (Microsoft) Windows NT (Microsoft) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0813