CVE-2003-0528

Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0715.

• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0100.html
• http://marc.info/?l=bugtraq&m=106407417011430&w=2
• http://www.cert.org/advisories/CA-2003-23.htmlPatch, Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/254236US Government Resource
• http://www.nsfocus.com/english/homepage/research/0306.htm
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-039
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A127
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2884
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2968
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3966
• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0100.html
• http://marc.info/?l=bugtraq&m=106407417011430&w=2
• http://www.cert.org/advisories/CA-2003-23.htmlPatch, Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/254236US Government Resource
• http://www.nsfocus.com/english/homepage/research/0306.htm
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-039
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A127
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2884
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2968
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3966

Published

Sep 17, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0521Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 all…
• CVE-2003-0522Multiple SQL injection vulnerabilities in ProductCart 1.5 th…
• CVE-2003-0523Cross-site scripting (XSS) vulnerability in msg.asp for cert…
• CVE-2003-0524Qt in Knoppix 3.1 Live CD allows local users to overwrite ar…
• CVE-2003-0525The getCanonicalPath function in Windows NT 4.0 may free mem…
• CVE-2003-0526Cross-site scripting (XSS) vulnerability in Microsoft Intern…
• CVE-2003-0530Buffer overflow in the BR549.DLL ActiveX control for Interne…
• CVE-2003-0531Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote att…
• CVE-2003-0532Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly…
• CVE-2003-0533Stack-based buffer overflow in certain Active Directory serv…
• CVE-2003-0535Buffer overflow in xbl 1.0k and earlier allows local users t…
• CVE-2003-0536Directory traversal vulnerability in phpSysInfo 2.1 and earl…