Vulnerability in Scriptlogic

CVE-2003-1121

Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, which allows remote attackers to (1) modify arbitrary registry entries via the ScriptLogic RPC service (SLRPC) or (2) modify arbitrary configuration via the RunAdmin services (SLRAserver.exe and SLRAclient.exe).

EPSS: 0.042 (89.8th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (vdb-entry, x_refsource_XF)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
  • cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
  • cve@mitre.org (x_refsource_CONFIRM, US Government Resource, Third Party Advisory)
  • cve@mitre.org (vdb-entry, x_refsource_XF)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (x_refsource_CONFIRM, US Government Resource, Third Party Advisory)