CVE coverage

CVE-2003-0812

CVSS 7.5 12 detections found

Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.

Detection rules

Source	Rule	Status	Updated
suricata	GPL NETBIOS SMB DCERPC Workstation Service unicode bind attempt	rev 8	2024-03-08
suricata	GPL NETBIOS SMB DCERPC Workstation Service bind attempt	rev 8	2024-03-08
suricata	GPL NETBIOS SMB-DS DCERPC Workstation Service unicode bind attempt	rev 10	2024-03-08
suricata	GPL NETBIOS SMB-DS DCERPC Workstation Service bind attempt	rev 9	2024-03-08
suricata	GPL NETBIOS DCERPC Workstation Service direct service bind attempt	rev 8	2024-03-08
suricata	GPL NETBIOS DCERPC Workstation Service direct service access attempt	rev 7	2019-07-26
snort	GPL NETBIOS SMB DCERPC Workstation Service unicode bind attempt	rev 7	2012-01-16
snort	GPL NETBIOS DCERPC Workstation Service direct service access attempt	rev 7	2012-01-16
snort	GPL NETBIOS DCERPC Workstation Service direct service bind attempt	rev 7	2012-01-16
snort	GPL NETBIOS SMB-DS DCERPC Workstation Service bind attempt	rev 8	2012-01-16
snort	GPL NETBIOS SMB-DS DCERPC Workstation Service unicode bind attempt	rev 9	2012-01-16
snort	GPL NETBIOS SMB DCERPC Workstation Service bind attempt	rev 7	2012-01-16