National Vulnerability Database (CVE-2003-0715)

National Cyber-Alert System Vulnerability Summary: CVE-2003-0715
Orirignal release date: 2003-09-17 Source: US-CERT/NIST ### Overview Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0528. ### Impact CVSS Severity: 10 (High) Range: remote Authentication: input bound="1" Impact Type: sec_prot admin="1" ### Reference to Advisories, Solutions, and Tools External Source: Microsoft Name: Buffer Overrun In RPCSS Service Could Allow Code Execution (824146) Hyperlink: http://www.microsoft.com/technet/security/bulletin/MS03-039.asp External Source: Security Focus Name: bid 8458 Hyperlink: http://www.securityfocus.com/bid/8458 External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: CERT Name: CA-2003-23 Hyperlink: http://www.cert.org/advisories/CA-2003-23.html External Source: CERT-VN Name: VU#483492 Hyperlink: http://www.kb.cert.org/vuls/id/483492 External Source: OVAL Name: OVAL264 Hyperlink: http://oval.mitre.org/oval/definitions/data/oval264.html External Source: OVAL Name: OVAL1202 Hyperlink: http://oval.mitre.org/oval/definitions/data/oval1202.html External Source: OVAL Name: OVAL1813 Hyperlink: http://oval.mitre.org/oval/definitions/data/oval1813.html External Source: OVAL Name: OVAL20 Hyperlink: http://oval.mitre.org/oval/definitions/data/oval20.html External Source: OVAL Name: OVAL4224 Hyperlink: http://oval.mitre.org/oval/definitions/data/oval4224.html ### Vulnerable Software and Vendor Windows XP (Microsoft) Windows 2000 (Microsoft) Windows Server 2003 (Microsoft) Windows NT (Microsoft) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0715