National Cyber Awareness System

Vulnerability Summary for CVE-2003-0813

Overview

A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.

Impact

CVSS Severity (version 2.0 incomplete approximation):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#547820

Name: VU#547820

Type: Advisory; Patch Information

Hyperlink:http://www.kb.cert.org/vuls/id/547820

US-CERT Technical Alert: TA04-104A

Name: TA04-104A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA04-104A.html

External Source: ISS

Name: 20031014 Microsoft RPC Race Condition Denial of Service

Type: Advisory; Patch Information

Hyperlink:http://xforce.iss.net/xforce/alerts/id/155

External Source: MISC

Name: http://www.securitylab.ru/_exploits/rpc2.c.txt

Hyperlink:http://www.securitylab.ru/_exploits/rpc2.c.txt

External Source: BUGTRAQ

Name: 20031010 Bad news on RPC DCOM vulnerability

Type: Advisory

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=106579825211708&w=2

External Source: FULLDISC

Name: 20031011 Bad news on RPC DCOM2 vulnerability

Hyperlink:http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011901.html

External Source: FULLDISC

Name: 20031010 Re: Bad news on RPC DCOM vulnerability

Hyperlink:http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011886.html

External Source: FULLDISC

Name: 20031010 Re : [VERY] BAD news on RPC DCOM Exploit

Hyperlink:http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011870.html

External Source: BID

Name: 8811

Hyperlink:http://www.securityfocus.com/bid/8811

External Source: MS

Name: MS04-012

Hyperlink:http://www.microsoft.com/technet/security/bulletin/ms04-012.mspx

External Source: NTBUGTRAQ

Name: 20031010 Bad news on RPC DCOM vulnerability

Hyperlink:http://marc.theaimsgroup.com/?l=ntbugtraq&m=106580303918155&w=2

External Source: BUGTRAQ

Name: 20031011 RE: Bad news on RPC DCOM vulnerability

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=106588827513795&w=2

US Government Resource: oval:org.mitre.oval:def:900

Name: oval:org.mitre.oval:def:900

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:900

US Government Resource: oval:org.mitre.oval:def:894

Name: oval:org.mitre.oval:def:894

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:894

US Government Resource: oval:org.mitre.oval:def:893

Name: oval:org.mitre.oval:def:893

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:893

References to Check Content

Identifier:oval:org.mitre.oval:def:893

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:893

Identifier:oval:org.mitre.oval:def:900

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:900

Identifier:oval:org.mitre.oval:def:894

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:894