CVE-2003-0605
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of...
CVE-2003-0605 is a high vulnerability (CVSS 7.5) in Microsoft Windows 2000, published July 29, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 58.8%, the 99th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 58.8%EPSS, 99th percentile
- Exploitation
- None known10 public exploits
- Fixed in
- No fix listedNo source names one
Description
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows Server 2000 - RPC DCOM Interface Denial of Service | 2003-07-21 |
| Exploit-DB | Microsoft Windows - 'RPC DCOM' Remote Buffer Overflow | 2003-07-25 |
| Exploit-DB | Microsoft Windows XP/2000 - 'RPC DCOM' Remote (MS03-026) | 2003-07-26 |
| Exploit-DB | Microsoft Windows - 'RPC DCOM' Remote (1) | 2003-07-29 |
| Exploit-DB | Microsoft Windows - 'RPC DCOM' Remote (2) | 2003-07-30 |
| Exploit-DB | Microsoft Windows - 'RPC DCOM' Remote (Universal) | 2003-08-07 |
| Exploit-DB | Microsoft Windows - 'RPC DCOM' Scanner (MS03-039) | 2003-09-12 |
| Exploit-DB | Microsoft Windows - 'RPC DCOM2' Remote (MS03-039) | 2003-09-20 |
| Exploit-DB | Microsoft Windows - 'RPC2' Universal / Denial of Service (RPC3) (MS03-039) | 2003-10-09 |
| Exploit-DB | Microsoft Windows XP/2000 - RPC Remote Non Exec Memory | 2003-11-07 |
What each source reports
NVD Score used
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.
- Record
CVE-2003-0605- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.
- Record
CVE-2003-0605- Updated
- 2026-11-02
EUVDEUVD-2003-0599No score
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.
- Record
EUVD-2003-0599- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fvvx-2crq-42frNo score
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of...
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.
- Record
GHSA-fvvx-2crq-42fr- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
marc.info?l=bugtraq&m=105880332428706&w=2
lists.grok.org.uk/pipermail/full-disclosure/2003-July/006851.html
cert.org/advisories/CA-2003-23.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A494