Oval Definition:oval:org.mitre.oval:def:575
Revision Date:2011-10-03Version:43
Title:Windows 2000 Workstation Service Logging Function Buffer Overflow
Description:Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2003-0812
Platform(s):Microsoft Windows 2000
Product(s):Microsoft Windows Workstation Service
Definition Synopsis
  • Software section
  • Windows 2000 is installed
  • AND the version of wkssvc.dll is less than 5.00.2195.6862
  • AND NOT the patch q828748 is installed (Hotfix key)
  • AND Configuration section
  • the workstation service is enabled
    • BACK