CVE-2003-0003

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=104394414713415&w=2Third Party Advisory
http://marc.info/?l=ntbugtraq&m=104393588232166&w=2Third Party Advisory
http://www.cert.org/advisories/CA-2003-03.htmlPatch, Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/610986Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/6666Third Party Advisory, VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-001
https://exchange.xforce.ibmcloud.com/vulnerabilities/11132Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A103Third Party Advisory
http://marc.info/?l=bugtraq&m=104394414713415&w=2Third Party Advisory
http://marc.info/?l=ntbugtraq&m=104393588232166&w=2Third Party Advisory
http://www.cert.org/advisories/CA-2003-03.htmlPatch, Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/610986Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/6666Third Party Advisory, VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-001
https://exchange.xforce.ibmcloud.com/vulnerabilities/11132Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A103Third Party Advisory

Timeline

Published: Feb 7, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-00047.2Buffer overflow in the Windows Redirector function in Microsoft Windows XP allows local users to execute arbitrary code via a long parameter CVE-2003-00075.0Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which caus CVE-2003-00096.8Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary sc CVE-2003-00107.5Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating sy CVE-2003-00115.0Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 a CVE-2003-00122.1The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world-writable permissions CVE-2003-00137.5The default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 do not include filenames for CVE-2003-00144.6gsinterf.c in bmv 1.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.CVE-2003-00157.5Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code CVE-2003-00167.5Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a denial of service or CVE-2003-00175.0Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain illeg CVE-2003-00183.6Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to