The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2003-08-27 04:00
Updated : 2024-02-28 10:24
NVD link : CVE-2003-0605
Mitre link : CVE-2003-0605
CVE.ORG link : CVE-2003-0605
JSON object : View
Products Affected
microsoft
- windows_2000
CWE