Windows NT/2000/XP/2003 RPC buffer overflow updated since 17.07.2003
Published:		14.04.2004
Source:		MICROSOFT
SecurityVulns ID:		2988
Type:		remote
Level:		10/10
Description:		Multiple buffer overflows during RPC request parsing via TCP/135 and another RPC ports.

Affected:		MICROSOFT : Windows NT 4.0 Workstation
		MICROSOFT : Windows NT 4.0 Server
		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		EEYE, [Full-Disclosure] EEYE: Microsoft DCOM RPC Memory Leak (14.04.2004)
		EEYE, [Full-Disclosure] EEYE: Microsoft DCOM RPC Race Condition (14.04.2004)
		MICROSOFT, Microsoft Security Bulletin MS04-012 (14.04.2004)
		CORE SECURITY TECHNOLOGIES ADVISORIES, [CORE-2003-12-05] DCE RPC Vulnerabilities New Attack Vectors Analysis (11.12.2003)
		3APA3A, Bad news on RPC DCOM vulnerability (11.10.2003)
		flashsky fangxing, The Analysis of RPC Long Filename Heap Overflow AND a Way to Write Universal Heap Overflow of Windows (22.09.2003)
		EEYE, EEYE: Microsoft RPC Heap Corruption Vulnerability - Part II (11.09.2003)
		Elv1S, [Full-Disclosure] MS03-039 - Exploit ... (11.09.2003)
		NSFOCUS, NSFOCUS SA2003-06 : Microsoft Windows RPC DCOM Interface Heap Overflow Vulnerability (11.09.2003)
		X-FORCE, ISS Security Brief: Multiple Vulnerabilities in Microsoft RPC Service (11.09.2003)
		MICROSOFT, Microsoft Security Bulletin MS03-039: Buffer Overrun In RPCSS Service Could Allow Code Execution(824146) (11.09.2003)
		CERT, CERT Advisory CA-2003-23 RPCSS Vulnerabilities in Microsoft Windows (11.09.2003)
		LSD, [LSD] Critical security vulnerability in Microsoft Operating Systems (17.07.2003)
		MICROSOFT, Microsoft Security Bulletin MS03-026: Buffer Overrun In RPC Interface Could Allow Code Execution(Q823980) (17.07.2003)

Files:		MS03-039 scanner
		f RPC Long Filename Heap Overflow exploit
		Windows RPC universal exploit
		Windows RPC DCOM Dos exploit
		universal shellcode for Windows RPC universal exploit
		RPC universal exploit. Exploit MS09-039 vulnerability (patched systems to DoS)
		rpc remote return-into-libc exploit
		Microsoft Security Bulletin MS04-012 Cumulative Update for Microsoft RPC/DCOM (828741)
		Windows RPC DCOM2 Remote Exploit Ver1.1 (MS03-039)
Discuss:		Read or add your comments to this news (0 comments)