|
Windows NT/2000/XP/2003 RPC buffer overflow updated since 17.07.2003 | | Published: |  | 14.04.2004 | | Source: |  | MICROSOFT | | SecurityVulns ID: |  | 2988 | | Type: |  | remote | | Level: |  | 10/10 | | Description: |  | Multiple buffer overflows during RPC request parsing via TCP/135 and another RPC ports. |
| Affected: |  | MICROSOFT : Windows NT 4.0 Workstation | | |  | MICROSOFT : Windows NT 4.0 Server | | |  | MICROSOFT : Windows 2000 Server | | |  | MICROSOFT : Windows 2000 Professional | | |  | MICROSOFT : Windows XP | | |  | MICROSOFT : Windows 2003 Server |
| Original document |  | EEYE, [Full-Disclosure] EEYE: Microsoft DCOM RPC Memory Leak (14.04.2004) |
| |  | EEYE, [Full-Disclosure] EEYE: Microsoft DCOM RPC Race Condition (14.04.2004) |
| |  | MICROSOFT, Microsoft Security Bulletin MS04-012 (14.04.2004) |
| |  | CORE SECURITY TECHNOLOGIES ADVISORIES, [CORE-2003-12-05] DCE RPC Vulnerabilities New Attack Vectors Analysis (11.12.2003) |
| |  | 3APA3A, Bad news on RPC DCOM vulnerability (11.10.2003) |
| |  | flashsky fangxing, The Analysis of RPC Long Filename Heap Overflow AND a Way to Write Universal Heap Overflow of Windows (22.09.2003) |
| |  | EEYE, EEYE: Microsoft RPC Heap Corruption Vulnerability - Part II (11.09.2003) |
| |  | Elv1S, [Full-Disclosure] MS03-039 - Exploit ... (11.09.2003) |
| |  | NSFOCUS, NSFOCUS SA2003-06 : Microsoft Windows RPC DCOM Interface Heap Overflow Vulnerability (11.09.2003) |
| |  | X-FORCE, ISS Security Brief: Multiple Vulnerabilities in Microsoft RPC Service (11.09.2003) |
| |  | MICROSOFT, Microsoft Security Bulletin MS03-039: Buffer Overrun In RPCSS Service Could Allow Code Execution(824146) (11.09.2003) |
| |  | CERT, CERT Advisory CA-2003-23 RPCSS Vulnerabilities in Microsoft Windows (11.09.2003) |
| |  | LSD, [LSD] Critical security vulnerability in Microsoft Operating Systems (17.07.2003) |
| |  | MICROSOFT, Microsoft Security Bulletin MS03-026: Buffer Overrun In RPC Interface Could Allow Code Execution(Q823980) (17.07.2003) |
|
|
|
|
|