CVE-2003-0605
EXPLOITEDWindows 2000 SP3-SP4 - Denial of Service and Privilege Escalation via RPC DCOM Interface
Title source: llmExploitation Summary
CVE-2003-0605 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 10 public exploits from researchers including ins1der, anonymous, Flashsky.
AI-analyzed exploit summary This exploit targets CVE-2003-0605, a vulnerability in the Windows RPC DCOM interface, using a return-into-libc technique to bypass non-executable memory protections. It includes shellcode and offsets for Windows 2000 SP0 and XP SP0 (English).
Description
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.
Exploits (10)
This exploit targets CVE-2003-0605, a vulnerability in the Windows RPC DCOM interface, using a return-into-libc technique to bypass non-executable memory protections. It includes shellcode and offsets for Windows 2000 SP0 and XP SP0 (English).
This exploit targets CVE-2003-0605, a buffer overflow vulnerability in the Windows RPC DCOM interface (MS03-039). It includes shellcode to add a user and can cause a DoS on patched systems. The code is designed for Windows XP and Windows 2000.
This exploit targets CVE-2003-0605, a buffer overflow vulnerability in the RPC DCOM interface of Microsoft Windows. It sends a maliciously crafted RPC request to execute arbitrary shellcode, which adds a user 'SST' with password '557'.
This code is a scanner for CVE-2003-0605, which targets the DCOM RPC vulnerability (MS03-039). It sends crafted packets to detect vulnerable systems by analyzing responses.
This exploit targets CVE-2003-0605, a buffer overflow vulnerability in the Windows RPC DCOM interface. It includes shellcode for a bind shell and uses universal return addresses for Windows 2000 and XP to achieve remote code execution.
This exploit targets CVE-2003-0605, a critical RPC DCOM vulnerability in Windows systems. It includes shellcode and multiple offsets for various Windows versions to achieve remote code execution.
This exploit targets CVE-2003-0605, a buffer overflow vulnerability in Windows RPC DCOM. It includes shellcode and multiple offsets for various Windows versions to achieve remote code execution.
This exploit targets CVE-2003-0605, a buffer overflow vulnerability in the DCOM RPC interface of Windows systems. It sends a maliciously crafted RPC request to trigger a buffer overflow, leading to remote code execution via a bind shell on port 4444.
This exploit targets CVE-2003-0605, a buffer overflow vulnerability in Microsoft Windows DCOM RPC interface. It uses a crafted RPC request to trigger the overflow and execute shellcode, likely achieving remote code execution (RCE).
This exploit targets a vulnerability in RPC DCOM (CVE-2003-0605) by sending malformed packets to port 135, causing a denial-of-service (DoS) condition. It does not include a reverse shell or arbitrary code execution, focusing solely on crashing the service.