CyberSec.Space Logo
Back to CVE Browser

CVE-2003-0003

HIGH
7.5
CVSS Severity Score
EPSS Score0.0640%
EPSS Percentile39.09th
PublishedFeb 7, 2003
Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.

Affected Platforms (CPE)

📦
Microsoft

Windows 2000 Terminal Services

All versions
💻
Microsoft

Windows 2000

All versions
💻
Microsoft

Windows 2000

All versions
💻
Microsoft

Windows 2000

All versions
💻
Microsoft

Windows 2000

All versions
💻
Microsoft

Windows 2000 Terminal Services

All versions
💻
Microsoft

Windows 2000 Terminal Services

All versions
💻
Microsoft

Windows 2000 Terminal Services

All versions
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Nt

= 4.0
💻
Microsoft

Windows Xp

All versions
💻
Microsoft

Windows Xp

All versions
💻
Microsoft

Windows Xp

All versions
💻
Microsoft

Windows Xp

All versions
💻
Microsoft

Windows Xp

All versions

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=104394414713415&w=2
🔗 http://marc.info/?l=ntbugtraq&m=104393588232166&w=2
🔗 http://www.cert.org/advisories/CA-2003-03.html
🔗 http://www.kb.cert.org/vuls/id/610986
🔗 http://www.securityfocus.com/bid/6666
🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-001
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/11132
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A103

Related Vulnerabilities

CVE-2006-39427.8

The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of se...

CVE-2000-03057.8

Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of ser...

CVE-2004-05677.5

The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 an...

CVE-2001-08607.5

Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead...