Exploitation Summary
CVE-2003-0352 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 4 public exploits from researchers including Metasploit, ey4s, [email protected], including a Metasploit module exploits/windows/dcerpc/ms03_026_dcom.
AI-analyzed exploit summary This is a Metasploit module exploiting CVE-2003-0352, a stack buffer overflow in the RPCSS service (MS03-026). It targets multiple Windows versions (NT 4.0 SP3-6a, 2000, XP, 2003) via a crafted DCE/RPC request to achieve remote code execution.
Description
Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.
Exploits (4)
This is a Metasploit module exploiting CVE-2003-0352, a stack buffer overflow in the RPCSS service (MS03-026). It targets multiple Windows versions (NT 4.0 SP3-6a, 2000, XP, 2003) via a crafted DCE/RPC request to achieve remote code execution.
This exploit targets CVE-2003-0352, a buffer overflow vulnerability in Microsoft Windows DCOM RPC interface. It constructs a malicious RPC request to trigger the overflow and execute arbitrary shellcode, potentially leading to remote code execution.
The provided text describes CVE-2003-0352, a buffer overflow vulnerability in Microsoft Windows DCOM RPC interface on port 135. Exploitation could lead to remote code execution with Local System privileges. The text references a GitLab link for the exploit but does not contain actual exploit code.
This Metasploit module exploits a stack buffer overflow in the RPCSS service (CVE-2003-0352) via a crafted DCOM RPC request. It supports multiple Windows versions (NT 4.0 SP3-6a, 2000, XP, 2003) with a universal payload and includes detailed memory corruption techniques.