PT-2003-1891
CVE-2003-0812
·
Publicado
2003-11-18
·
Atualizado
2019-04-30
Descrição por
CVSS 2.0
7.5
AltaMétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
Windows Workstation Service (WKSSVC.DLL) (affected versions not specified)
Description:
The issue is related to a stack-based buffer overflow in a logging function. This allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file, specifically "NetSetup.LOG". The NetAddAlternateComputerName API is used to demonstrate this.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾