Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2003-0352

CVSS 7.5 2 detections found
View on NVD →
Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.

Detection rules

Source Rule Status Updated
suricata GPL NETBIOS SMB-DS DCERPC ISystemActivator bind attempt rev 14 2024-03-14
snort GPL NETBIOS SMB-DS DCERPC ISystemActivator bind attempt rev 12 2012-01-16