CVE-2003-0812
HIGH 7.5EPSS 82.1%
Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.
- CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 82.06% chance of exploitation in the next 30 days, 100th percentile
- Published
- 2003-11-18
- Updated
- 2024-08-08
Proof-of-concept exploits (1)
Metasploit modules (1)
ExploitDB entries (4)
- https://www.exploit-db.com/exploits/16378
- https://www.exploit-db.com/exploits/130
- https://www.exploit-db.com/exploits/123
- https://www.exploit-db.com/exploits/119
Security advisories
- http://www.securityfocus.com/bid/9011
- http://www.kb.cert.org/vuls/id/567620
- http://www.cisco.com/warp/public/707/cisco-sa-20040129-ms03-049.shtml
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-049