Signature Detail
Short Name |
MS-RPC:OF:MSG-QUEUE-1 |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
MS-RPC |
Keywords |
Microsoft Message Queue Manager Heap Overflow (1) |
Release Date |
2005/07/11 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
MS-RPC: Microsoft Message Queue Manager Heap Overflow (1)
This signature detects attempts to exploit a known vulnerability against Microsoft Windows 2000 Message Queue Manager. Attackers can send a specially-crafted queue registration request to overflow a buffer and execute arbitrary code on the system with Local System privileges.
Extended Description
Arbitrary code can be executed with system level privileges, or a denial of the RPC service can occur.
References
- CVE: CVE-2003-0995