Sploitus

Exploit for Windows RPC DCOM interface buffer overflow

saint Β· 2006-04-04

Exploit Code

MARKDOWN33 lines
## https://sploitus.com/exploit?id=SAINT:6744F2350A4D8116E60E76A03B8ECBE6
Added: 04/04/2006  
CVE: CVE-2003-0352  
BID: 8205  
OSVDB: 2100  


### Background

The Distributed Component Object Model is a technology in Microsoft Windows operating systems which allows software components to communicate. Remote Procedure Call (RPC) is a protocol used to request a service from a program on another computer. 

### Problem

Insufficient input validation in the Windows RPCSS service leads to a buffer overflow in the DCOM process, leading to command execution. 

### Resolution

Install the patch referenced in Microsoft Security Bulletin 03-026. 

### References

http://www.cert.org/advisories/CA-2003-16.html   


### Limitations

This exploit may cause the target system to crash. 

### Platforms

Windows 2000  
Windows XP  
Windows Server 2003