This CPE summary could be partial or incomplete. Please contact us for a detailed listing.


Vendor Microsoft First view 2006-06-13
Product Windows Server 2003 Last view 2008-10-14
Version - Type Os
Update sp1  
Edition *  
Language *  
Sofware Edition *  
Target Software *  
Target Hardware itanium  
Other *  
CPE Product cpe:2.3:o:microsoft:windows_server_2003

Activity : Overall

Related : CVE

  Date Alert Description
7.2 2008-10-14 CVE-2008-2252

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate parameters sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability."

5.4 2008-06-11 CVE-2008-1441

Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of Pragmatic General Multicast (PGM) packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability."

9.3 2008-04-23 CVE-2007-6255

Buffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote attackers to execute arbitrary code via the Host argument to an unspecified method.

10 2006-06-13 CVE-2006-2373

The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an arbitrary address, possibly for kernel memory, aka the "SMB Driver Elevation of Privilege Vulnerability."

CWE : Common Weakness Enumeration

50% (2) CWE-264 Permissions, Privileges, and Access Controls
25% (1) CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer
25% (1) CWE-20 Improper Input Validation

CAPEC : Common Attack Pattern Enumeration & Classification

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
id Name
CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters
CAPEC-7 Blind SQL Injection
CAPEC-8 Buffer Overflow in an API Call
CAPEC-9 Buffer Overflow in Local Command-Line Utilities
CAPEC-10 Buffer Overflow via Environment Variables
CAPEC-13 Subverting Environment Variable Values
CAPEC-14 Client-side Injection-induced Buffer Overflow
CAPEC-18 Embedding Scripts in Nonscript Elements
CAPEC-22 Exploiting Trust in Client (aka Make the Client Invisible)
CAPEC-24 Filter Failure through Buffer Overflow
CAPEC-28 Fuzzing
CAPEC-31 Accessing/Intercepting/Modifying HTTP Cookies
CAPEC-32 Embedding Scripts in HTTP Query Strings
CAPEC-42 MIME Conversion
CAPEC-43 Exploiting Multiple Input Interpretation Layers
CAPEC-45 Buffer Overflow via Symbolic Links
CAPEC-46 Overflow Variables and Tags
CAPEC-47 Buffer Overflow via Parameter Expansion
CAPEC-52 Embedding NULL Bytes
CAPEC-53 Postfix, Null Terminate, and Backslash
CAPEC-63 Simple Script Injection
CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic
CAPEC-66 SQL Injection
CAPEC-67 String Format Overflow in syslog()
CAPEC-71 Using Unicode Encoding to Bypass Validation Logic

Open Source Vulnerability Database (OSVDB)

id Description
49056 Microsoft Windows Kernel Memory Corruption Local Privilege Escalation
46068 Microsoft Windows Pragmatic General Multicast (PGM) Fragment Handling Remote DoS
44652 Microsoft HeartbeatCtl HRTBEAT.OCX ActiveX Unspecified Method Host Argument O...
26440 Microsoft Windows SMB MrxSmbCscIoctlOpenForCopyChunk Function Overflow

OpenVAS Exploits

id Description
2011-01-10 Name : Microsoft Pragmatic General Multicast (PGM) Denial of Service Vulnerability ...
File : nvt/gb_ms08-036.nasl
2008-10-15 Name : Windows Kernel Elevation of Privilege Vulnerability (954211)
File : nvt/secpod_ms08-061_900051.nasl

Information Assurance Vulnerability Management (IAVM)

id Description
2008-T-0025 Microsoft Pragmatic General Multicast (PGM) Denial of Service Vulnerabilities
Severity: Category I - VMSKEY: V0016038

Snort® IPS/IDS

Date Description
2014-01-10 Microsoft Windows Pragmatic General Multicast Protocol memory consumption den...
RuleID : 17667 - Type : OS-WINDOWS - Revision : 6
2014-01-10 Microsoft PGM fragment denial of service attempt
RuleID : 13825 - Type : OS-WINDOWS - Revision : 9
2014-01-10 Microsoft HeartbeatCtl ActiveX function call unicode access
RuleID : 13761 - Type : WEB-ACTIVEX - Revision : 5
2014-01-10 Microsoft HeartbeatCtl ActiveX function call access
RuleID : 13760 - Type : BROWSER-PLUGINS - Revision : 9
2014-01-10 Microsoft HeartbeatCtl ActiveX clsid unicode access
RuleID : 13759 - Type : WEB-ACTIVEX - Revision : 5
2014-01-10 Microsoft HeartbeatCtl ActiveX clsid access
RuleID : 13758 - Type : BROWSER-PLUGINS - Revision : 10

Nessus® Vulnerability Scanner

id Description
2008-10-15 Name: A local user can elevate his privileges on the remote host.
File: smb_nt_ms08-061.nasl - Type: ACT_GATHER_INFO
2008-06-10 Name: An unauthenticated attacker can crash the remote host.
File: smb_nt_ms08-036.nasl - Type: ACT_GATHER_INFO
2006-06-13 Name: It is possible to execute code on the remote host.
File: smb_nt_ms06-030.nasl - Type: ACT_GATHER_INFO