CVE-2003-0605

The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.

• http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006851.html
• http://marc.info/?l=bugtraq&m=105880332428706&w=2
• http://www.cert.org/advisories/CA-2003-19.htmlUS Government Resource
• http://www.cert.org/advisories/CA-2003-23.htmlUS Government Resource
• http://www.kb.cert.org/vuls/id/326746US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-039
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1118
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A494
• http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006851.html
• http://marc.info/?l=bugtraq&m=105880332428706&w=2
• http://www.cert.org/advisories/CA-2003-19.htmlUS Government Resource
• http://www.cert.org/advisories/CA-2003-23.htmlUS Government Resource
• http://www.kb.cert.org/vuls/id/326746US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-039
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1118
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A494

Published

Aug 27, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0598Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2003-0599Unknown vulnerability in the Virtual File System (VFS) capab…
• CVE-2003-0601Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2…
• CVE-2003-0602Multiple cross-site scripting vulnerabilities (XSS) in Bugzi…
• CVE-2003-0603Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and ear…
• CVE-2003-0604Windows Media Player (WMP) 7 and 8, as running on Internet E…
• CVE-2003-0606sup 1.8 and earlier does not properly create temporary files…
• CVE-2003-0607Buffer overflow in xconq 7.4.1 allows local users to become …
• CVE-2003-0609Stack-based buffer overflow in the runtime linker, ld.so.1, …
• CVE-2003-0610Directory traversal vulnerability in ePO agent for McAfee eP…
• CVE-2003-0611Multiple buffer overflows in xtokkaetama 1.0 allow local use…
• CVE-2003-0612Multiple buffer overflows in main.c for Crafty 19.3 allow lo…