ByteOS Network

Vulnerability Details :

CVE-2007-3039

Assigner Org ID-f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At-12 Dec, 2007 | 00:00

Updated At-07 Aug, 2024 | 13:57

Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:microsoft

Assigner Org ID:f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At:12 Dec, 2007 | 00:00

Updated At:07 Aug, 2024 | 13:57

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://www.exploit-db.com/exploits/4934	exploit x_refsource_EXPLOIT-DB
https://www.exploit-db.com/exploits/4760	exploit x_refsource_EXPLOIT-DB
https://www.exploit-db.com/exploits/4745	exploit x_refsource_EXPLOIT-DB
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474	vdb-entry signature x_refsource_OVAL
http://www.securityfocus.com/archive/1/485268/100/0/threaded	vendor-advisory x_refsource_HP
http://www.securitytracker.com/id?1019077	vdb-entry x_refsource_SECTRACK
http://secunia.com/advisories/28011	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/26797	vdb-entry x_refsource_BID
http://www.zerodayinitiative.com/advisories/ZDI-07-076.html	x_refsource_MISC
http://www.securityfocus.com/archive/1/485268/100/0/threaded	vendor-advisory x_refsource_HP
http://www.us-cert.gov/cas/techalerts/TA07-345A.html	third-party-advisory x_refsource_CERT
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065	vendor-advisory x_refsource_MS
http://www.vupen.com/english/advisories/2007/4181	vdb-entry x_refsource_VUPEN
http://www.securityfocus.com/archive/1/484891/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://secunia.com/advisories/28051	third-party-advisory x_refsource_SECUNIA

Hyperlink: https://www.exploit-db.com/exploits/4934

Resource:

exploit

x_refsource_EXPLOIT-DB

Hyperlink: https://www.exploit-db.com/exploits/4760

Resource:

exploit

x_refsource_EXPLOIT-DB

Hyperlink: https://www.exploit-db.com/exploits/4745

Resource:

exploit

x_refsource_EXPLOIT-DB

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.securityfocus.com/archive/1/485268/100/0/threaded

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://www.securitytracker.com/id?1019077

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://secunia.com/advisories/28011

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/bid/26797

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-07-076.html

Resource:

x_refsource_MISC

Hyperlink: http://www.securityfocus.com/archive/1/485268/100/0/threaded

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA07-345A.html

Resource:

third-party-advisory

x_refsource_CERT

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065

Resource:

vendor-advisory

x_refsource_MS

Hyperlink: http://www.vupen.com/english/advisories/2007/4181

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.securityfocus.com/archive/1/484891/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://secunia.com/advisories/28051

Resource:

third-party-advisory

x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.exploit-db.com/exploits/4934	exploit x_refsource_EXPLOIT-DB x_transferred
https://www.exploit-db.com/exploits/4760	exploit x_refsource_EXPLOIT-DB x_transferred
https://www.exploit-db.com/exploits/4745	exploit x_refsource_EXPLOIT-DB x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474	vdb-entry signature x_refsource_OVAL x_transferred
http://www.securityfocus.com/archive/1/485268/100/0/threaded	vendor-advisory x_refsource_HP x_transferred
http://www.securitytracker.com/id?1019077	vdb-entry x_refsource_SECTRACK x_transferred
http://secunia.com/advisories/28011	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/bid/26797	vdb-entry x_refsource_BID x_transferred
http://www.zerodayinitiative.com/advisories/ZDI-07-076.html	x_refsource_MISC x_transferred
http://www.securityfocus.com/archive/1/485268/100/0/threaded	vendor-advisory x_refsource_HP x_transferred
http://www.us-cert.gov/cas/techalerts/TA07-345A.html	third-party-advisory x_refsource_CERT x_transferred
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065	vendor-advisory x_refsource_MS x_transferred
http://www.vupen.com/english/advisories/2007/4181	vdb-entry x_refsource_VUPEN x_transferred
http://www.securityfocus.com/archive/1/484891/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://secunia.com/advisories/28051	third-party-advisory x_refsource_SECUNIA x_transferred

Hyperlink: https://www.exploit-db.com/exploits/4934

Resource:

exploit

x_refsource_EXPLOIT-DB

x_transferred

Hyperlink: https://www.exploit-db.com/exploits/4760

Resource:

exploit

x_refsource_EXPLOIT-DB

x_transferred

Hyperlink: https://www.exploit-db.com/exploits/4745

Resource:

exploit

x_refsource_EXPLOIT-DB

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/485268/100/0/threaded

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: http://www.securitytracker.com/id?1019077

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://secunia.com/advisories/28011

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securityfocus.com/bid/26797

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-07-076.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/485268/100/0/threaded

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA07-345A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065

Resource:

vendor-advisory

x_refsource_MS

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2007/4181

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/484891/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://secunia.com/advisories/28051

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secure@microsoft.com

Published At:12 Dec, 2007 | 00:46

Updated At:16 Oct, 2018 | 16:47

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.0	HIGH	AV:N/AC:L/Au:S/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:S/C:C/I:C/A:C

CPE Matches

Microsoft Corporation

>>windows_2000>>*

cpe:2.3:o:microsoft:windows_2000:*:sp4:pro:*:*:*:*:*

Microsoft Corporation

>>windows_2000>>*

cpe:2.3:o:microsoft:windows_2000:*:sp4:srv:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>*

cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*

Microsoft Corporation

>>message_queuing>>*

cpe:2.3:a:microsoft:message_queuing:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov