CVE-2003-0352

Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

98.48% chance of exploitation in the next 30 days, 100th percentile

Published

2003-07-17

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007079.html

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/dcerpc/ms03_026_dcom.rb

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/22917
• https://www.exploit-db.com/exploits/16749
• https://www.exploit-db.com/exploits/100

References

• CVE Record
• NVD entry

Related

• CVE-2003-0349
• CVE-2003-0358
• CVE-2003-0347
• CVE-2003-0371
• CVE-2003-0344
• CVE-2003-0372