CVE-2003-0109

Published: Mar 31, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.

Affected (8)

Products: Microsoft: Windows 2000, Windows 2000 Terminal Services

2 products

Windows 2000 Terminal Services

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000 Terminal Services	All versions
Microsoft Windows 2000 Terminal Services	All versions
Microsoft Windows 2000 Terminal Services	All versions
Microsoft Windows 2000 Terminal Services	All versions

References (32)

http://marc.info/?l=bugtraq&m=104826476427372&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104861839130254&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104869293619064&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104887148323552&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=105768156625699&w=2

Source: cve@mitre.org

http://marc.info/?l=ntbugtraq&m=104826785731151&w=2

Source: cve@mitre.org

http://microsoft.com/downloads/details.aspx?FamilyId=C9A38D45-5145-4844-B62E-C69D32AC929B&displaylang=en

Source: cve@mitre.org

http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ815021

Source: cve@mitre.org

http://www.cert.org/advisories/CA-2003-09.html

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=22029

Source: cve@mitre.org

PatchVendor Advisory

http://www.iss.net/security_center/static/11533.php

Source: cve@mitre.org

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/117394

Source: cve@mitre.org

US Government Resource

http://www.nextgenss.com/papers/ms03-007-ntdll.pdf

Source: cve@mitre.org

http://www.securityfocus.com/bid/7116

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-007

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A109

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104826476427372&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=104861839130254&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=104869293619064&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=104887148323552&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=105768156625699&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=ntbugtraq&m=104826785731151&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://microsoft.com/downloads/details.aspx?FamilyId=C9A38D45-5145-4844-B62E-C69D32AC929B&displaylang=en

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ815021

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cert.org/advisories/CA-2003-09.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=22029

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.iss.net/security_center/static/11533.php

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/117394

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.nextgenss.com/papers/ms03-007-ntdll.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/7116

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-007

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A109

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.