CVE

Id
7637  
CVE No.
CVE-2003-0813  
Status
Candidate  
Description
A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.  
Phase
Assigned (20030918)  
Votes
NOOP(1) Christey  
Comments
Christey> Note: MS04-012 references this CAN and credits eEye, who | describes a similar-looking issue in their advisory COMMENT | "AD20040413A." However, this particular candidate was published by | ISS in 2003. MITRE is investigating this discrepancy and will update | this candidate if necessary.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
44939 7637 CVE-2003-0813 ISS:20031014 Microsoft RPC Race Condition Denial of Service  View
44940 7637 CVE-2003-0813 URL:http://xforce.iss.net/xforce/alerts/id/155  View
44941 7637 CVE-2003-0813 BUGTRAQ:20031010 Bad news on RPC DCOM vulnerability  View
44942 7637 CVE-2003-0813 URL:http://marc.info/?l=bugtraq&m=106579825211708&w=2  View
44943 7637 CVE-2003-0813 BUGTRAQ:20031011 RE: Bad news on RPC DCOM vulnerability  View
44944 7637 CVE-2003-0813 URL:http://marc.info/?l=bugtraq&m=106588827513795&w=2  View
44945 7637 CVE-2003-0813 NTBUGTRAQ:20031010 Bad news on RPC DCOM vulnerability  View
44946 7637 CVE-2003-0813 URL:http://marc.info/?l=ntbugtraq&m=106580303918155&w=2  View
44947 7637 CVE-2003-0813 FULLDISC:20031010 Re : [VERY] BAD news on RPC DCOM Exploit  View
44948 7637 CVE-2003-0813 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011870.html  View
44949 7637 CVE-2003-0813 FULLDISC:20031010 Re: Bad news on RPC DCOM vulnerability  View
44950 7637 CVE-2003-0813 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011886.html  View
44951 7637 CVE-2003-0813 MISC:http://www.securitylab.ru/_exploits/rpc2.c.txt  View
44952 7637 CVE-2003-0813 FULLDISC:20031011 Bad news on RPC DCOM2 vulnerability  View
44953 7637 CVE-2003-0813 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011901.html  View
44954 7637 CVE-2003-0813 MS:MS04-012  View
44955 7637 CVE-2003-0813 URL:http://www.microsoft.com/technet/security/bulletin/ms04-012.mspx  View
44956 7637 CVE-2003-0813 CERT:TA04-104A  View
44957 7637 CVE-2003-0813 URL:http://www.us-cert.gov/cas/techalerts/TA04-104A.html  View
44958 7637 CVE-2003-0813 CERT-VN:VU#547820  View
44959 7637 CVE-2003-0813 URL:http://www.kb.cert.org/vuls/id/547820  View
44960 7637 CVE-2003-0813 BID:8811  View
44961 7637 CVE-2003-0813 URL:http://www.securityfocus.com/bid/8811  View
44962 7637 CVE-2003-0813 OVAL:oval:org.mitre.oval:def:893  View
44963 7637 CVE-2003-0813 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:893  View
44964 7637 CVE-2003-0813 OVAL:oval:org.mitre.oval:def:894  View
44965 7637 CVE-2003-0813 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:894  View
44966 7637 CVE-2003-0813 OVAL:oval:org.mitre.oval:def:900  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63607 JVNDB-2003-000333 Microsoft Internet Explorer の ExecCommand メソッドにおける任意のコードを実行される脆弱性 Microsoft Internet Explorer には、ExecCommand メソッドに対するクロスドメインセキュリティチェックの実装の不備により、異なるドメインのデータへアクセス可能な脆弱性が存在します。 CVE-2003-0814 7637 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000333.html  View