CVE-2003-0605

The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.

Date published : 2003-07-29

http://marc.info/?l=bugtraq&m=105880332428706&w=2

http://www.cert.org/advisories/CA-2003-19.html