9.8crit
CVE-2003-1233
Pedestal Software Integrity Protection Driver (IPD) 1.3 and earlier allows privileged attackers, such as rootkits, to bypass file access re…
Published 22 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
1.6%
percentile 76%
Public exploits
0
none known
Summary
Pedestal Software Integrity Protection Driver (IPD) 1.3 and earlier allows privileged attackers, such as rootkits, to bypass file access restrictions to the Windows kernel by using the NtCreateSymbolicLinkObject function to create a symbolic link to (1) \Device\PhysicalMemory or (2) to a drive letter using the subst command.
Exploit prediction (EPSS)
1.63% probability of exploitation in the next 30 days, higher than 76% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:N/I:P/A:N |
Classification
- Weakness
- CWE-59 Improper Link Resolution Before File Access
References
- archives.neohapsis.com /archives/bugtraq/2003-01/0017.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
- archives.neohapsis.com /archives/bugtraq/2003-01/0018.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /bid/6511 · vdb-entry, x_refsource_BID, x_transferred
- phrack.org /show.php?p=59&a=16 · x_refsource_MISC, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/10979 · vdb-entry, x_refsource_XF, x_transferred
- secunia.com /advisories/7816 · third-party-advisory, x_refsource_SECUNIA, x_transferred
Sources
- CVE List: CVE-2003-1233
- NVD: CVE-2003-1233
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.