CVE-2003-1233 Security feature bypass in n/a
Privileged attackers can bypass file access restrictions in the Windows kernel driver to access physical memory or drives via symbolic links.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2003-1233?
CVE-2003-1233 is a critical vulnerability in n/a, published on 28 Oct 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Pedestal Software Integrity Protection Driver (IPD) 1.3 and earlier allows privileged attackers, such as rootkits, to bypass file access restrictions to the Windows kernel by using the NtCreateSymbolicLinkObject function to create a symbolic link to (1) \Device\PhysicalMemory or (2) to a drive letter using the subst command.
Weakness: CWE-59
Which versions are affected by CVE-2003-1233?
It affects 1 product.
Products include Pedestalsoftware Integrity Protection Driver.
How do I fix CVE-2003-1233?
No fix has been published for CVE-2003-1233 yet. Limit exposure of the affected software until one is available.
Is CVE-2003-1233 being exploited?
There is no known exploitation of CVE-2003-1233 in the wild and no public exploit code.
Sources
Also known as GHSA-qf6r-hr4r-92vr.