CVE-2003-0818
Microsoft Windows NT 4.0, 2000, 2003 Server - Remote Code Execution via ASN.1 BER Length Field Overflow
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2003-0818.
PoCs published by Metasploit, Solar Eclipse, Christophe Devine, including Metasploit module exploits/windows/smb/ms04_007_killbill.
AI-analyzed exploit summary This is a Metasploit module exploiting CVE-2003-0818, a heap overflow in the Microsoft ASN.1 library's bitstring decoding. It targets Windows 2000 and XP systems, delivering a payload via SMB or HTTP that crashes LSASS and may require a reboot.
Description
Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.
Exploits (4)
This is a Metasploit module exploiting CVE-2003-0818, a heap overflow in the Microsoft ASN.1 library's bitstring decoding. It targets Windows 2000 and XP systems, delivering a payload via SMB or HTTP that crashes LSASS and may require a reboot.
This exploit targets CVE-2005-1935 (MS04-007), a vulnerability in Microsoft ASN.1 library allowing remote code execution. The provided code is a reference to a tar.gz file containing the exploit, likely a binary or script.
This exploit targets CVE-2003-0818 (MS04-007) by sending a malformed Session Setup AndX Request to trigger a buffer overflow in LSASS.EXE on Windows 2000, causing a denial-of-service (DoS) condition and system reboot.
This is a functional exploit for CVE-2003-0818, targeting a heap overflow in the Microsoft ASN.1 library. It leverages a crafted SPNEGO token to trigger the vulnerability, leading to remote code execution on vulnerable Windows systems.