Exploitation Summary
EIP tracks 5 public exploits for CVE-2003-0812.
PoCs published by Metasploit, fiNis, snooq, including Metasploit module exploits/windows/smb/ms03_049_netapi.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in the NetApi32 NetAddAlternateComputerName function via the Workstation service in Windows XP. It leverages a maliciously crafted Unicode string to achieve remote code execution.
Description
Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.
Exploits (5)
This is a Metasploit module exploiting a stack buffer overflow in the NetApi32 NetAddAlternateComputerName function via the Workstation service in Windows XP. It leverages a maliciously crafted Unicode string to achieve remote code execution.
This exploit targets CVE-2003-0812, a buffer overflow in the Windows Workstation Service (NetAddAlternateComputerName). It sends a crafted RPC request to trigger the vulnerability and execute a bind shell on port 9191.
This is a functional exploit for CVE-2003-0812 targeting the WKSSVC (Workstation Service) vulnerability in Windows 2000. It includes shellcode for both bind and reverse shells, leveraging a buffer overflow to achieve remote code execution.
This exploit targets CVE-2003-0812 (MS03-049) in Windows 2000 SP4 by leveraging a buffer overflow in the NetValidateName function. It uses a port-binding shellcode (5555) and a crafted buffer to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in the NetApi32 NetAddAlternateComputerName function via the Workstation service in Windows XP. It constructs a malicious DCERPC request with a long string to trigger the overflow and execute arbitrary payloads.