Unscored CVE-2003-0641 EUVD-2003-0635GHSA-7pfv-mphv-xxf6

WatchGuard ServerLock for Windows 2000 before SL 2.0.3 allows local users to load arbitrary modules via the OpenProcess() function, as demo…

Published Aug 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

WatchGuard ServerLock for Windows 2000 before SL 2.0.3 allows local users to load arbitrary modules via the OpenProcess() function, as demonstrated using (1) a DLL injection attack, (2) ZwSetSystemInformation, and (3) API hooking in OpenProcess.

References

serverlock-openprocess-load-module(12665) vdb-entry
6578 vdb-entry
20030717 Bypassing ServerLock protection on Windows 2000 mailing-list
8222 vdb-entry
9310 third-party-advisory