CVE coverage
View on NVD →
CVE-2003-0605
CVSS 7.5
4 detections found
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | GPL NETBIOS DCERPC Remote Activation bind attempt | rev 17 | 2024-03-08 |
| suricata | GPL NETBIOS SMB-DS DCERPC Remote Activation bind attempt | rev 16 | 2024-03-08 |
| snort | GPL NETBIOS SMB-DS DCERPC Remote Activation bind attempt | rev 15 | 2012-01-16 |
| snort | GPL NETBIOS DCERPC Remote Activation bind attempt | rev 16 | 2012-01-16 |