National Cyber-Alert System

Vulnerability Summary for CVE-2003-0812

Overview

Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.

Impact

CVSS Severity (version 2.0 incomplete approximation):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#567620

Name: VU#567620

Type: Advisory; Patch Information

Hyperlink:http://www.kb.cert.org/vuls/id/567620

CERT/CC Advisory: CA-2003-28

Name: CA-2003-28

Hyperlink:http://www.cert.org/advisories/CA-2003-28.html

External Source: BID

Name: 9011

Type: Advisory; Patch Information

Hyperlink:http://www.securityfocus.com/bid/9011

External Source: MS

Name: MS03-049

Type: Advisory; Patch Information

Hyperlink:http://www.microsoft.com/technet/security/bulletin/MS03-049.asp

External Source: BUGTRAQ

Name: 20031111 EEYE: Windows Workstation Service Remote Buffer Overflow

Type: Advisory; Patch Information

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=106859247713009&w=2

External Source: CISCO

Name: 20040129 Buffer Overrun in Microsoft Windows 2000 Workstation Service (MS03-049)

Hyperlink:http://www.cisco.com/warp/public/707/cisco-sa-20040129-ms03-049.shtml

External Source: BUGTRAQ

Name: 20031112 Proof of concept for Windows Workstation Service overflow

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=106865197102041&w=2

US Government Resource: oval:org.mitre.oval:def:575

Name: oval:org.mitre.oval:def:575

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:575

US Government Resource: oval:org.mitre.oval:def:331

Name: oval:org.mitre.oval:def:331

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:331