CVE Details for CVE: CVE-2003-1121
Summary
Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, which allows remote attackers to (1) modify arbitrary registry entries via the ScriptLogic RPC service (SLRPC) or (2) modify arbitrary configuration via the RunAdmin services (SLRAserver.exe and SLRAclient.exe).
Timestamps
Last major update 11-07-2017 - 01:29
Published 31-12-2003 - 05:00
Last modified 11-07-2017 - 01:29
CAPEC
Click the CAPEC title to display a description
CVSS
Base
10.0
Impact
10.0
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid
  • 7475
  • 7477
cert-vn
  • VU#231705
  • VU#609137
confirm
xf
  • scriptlogic-rpc-modify-registry(11920)
  • scriptlogic-runadmin-admin-access(11921)