CVE-2003-1121 Privilege escalation in n/a
Remote attackers can modify registry entries and configuration files via RPC services running with elevated privileges, leading to privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2003-1121?
CVE-2003-1121 is a critical vulnerability in n/a, published on 12 Mar 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, which allows remote attackers to (1) modify arbitrary registry entries via the ScriptLogic RPC service (SLRPC) or (2) modify arbitrary configuration via the RunAdmin services (SLRAserver.exe and SLRAclient.exe).
Which versions are affected by CVE-2003-1121?
How do I fix CVE-2003-1121?
No fix has been published for CVE-2003-1121 yet. Limit exposure of the affected software until one is available.
Is CVE-2003-1121 being exploited?
There is no known exploitation of CVE-2003-1121 in the wild and no public exploit code.
Sources
Also known as GHSA-x779-crr7-764g.