| Definition Id: oval:org.mitre.oval:def:264 |
Date: 2003-12-03 |
| Title: |
Windows 2000 RPCSS DCOM Buffer Overflow (Blaster, Test 1) |
| Description: |
Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0528. |
| Version: |
1 |
Class: |
vulnerability |
| Status: |
ACCEPTED |
Reference(s): |
CVE-2003-0715
|
| Family: |
windows |
| Platform(s): |
Microsoft Windows 2000 |
Product(s): |
|
| Definition Synopsis: |
- Software section
- AND Configuration section
- DCOM is enabled on systems with SP3 or later
|