CVE-2003-0605 in the critical feed json
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use…
published 2003-07-29 23 y ago modified 2026-06-16 4 mo ago also EUVD-2003-0599
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 58.8%
- EPSS 58.8% chance of exploitation in 30 days, percentile 99.1%
- public exploits
- 10
- Exploit-DB
Summary
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.
Timeline
- First public exploit (EDB-61)
- Published
Exploit prediction
58.81% chance of exploitation in the next 30 days, higher than 99.1% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-117 Microsoft Windows XP/2000 - RPC Remote Non Exec Memory remote, 2003-11-07
- EDB-109 Microsoft Windows - 'RPC2' Universal / Denial of Service (RPC3) (MS03-039) remote, 2003-10-09
- EDB-103 Microsoft Windows - 'RPC DCOM2' Remote (MS03-039) remote, 2003-09-20
- EDB-97 Microsoft Windows - 'RPC DCOM' Scanner (MS03-039) remote, 2003-09-12
- EDB-76 Microsoft Windows - 'RPC DCOM' Remote (Universal) remote, 2003-08-07
- EDB-70 Microsoft Windows - 'RPC DCOM' Remote (2) remote, 2003-07-30
- EDB-69 Microsoft Windows - 'RPC DCOM' Remote (1) remote, 2003-07-29
- EDB-66 Microsoft Windows XP/2000 - 'RPC DCOM' Remote (MS03-026) remote, 2003-07-26
- EDB-64 Microsoft Windows - 'RPC DCOM' Remote Buffer Overflow remote, 2003-07-25
- EDB-61 Microsoft Windows Server 2000 - RPC DCOM Interface Denial of Service dos, 2003-07-21
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2003/ms03-039
vendor-advisory
-
marc.info
/?l=bugtraq&m=105880332428706&w=2
mailing-list
-
lists.grok.org.uk
/pipermail/full-disclosure/2003-July/006851.html
mailing-list
-
cert.org
/advisories/CA-2003-23.html
third-party-advisory, us-government-resource
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A494
vdb-entry, signature
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1118
vdb-entry, signature
-
cert.org
/advisories/CA-2003-19.html
third-party-advisory, us-government-resource
-
kb.cert.org
/vuls/id/326746
third-party-advisory, us-government-resource
Sources
- CVE List CVE-2003-0605
- NVD CVE-2003-0605
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.