WatchGuard ServerLock for Windows 2000 before SL 2.0.3... · CVE-2003-0641 · GitHub Advisory Database · GitHub

WatchGuard ServerLock for Windows 2000 before SL 2.0.3...

Moderate severity Unreviewed Published Apr 29, 2022 to the GitHub Advisory Database • Updated Jan 30, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

WatchGuard ServerLock for Windows 2000 before SL 2.0.3 allows local users to load arbitrary modules via the OpenProcess() function, as demonstrated using (1) a DLL injection attack, (2) ZwSetSystemInformation, and (3) API hooking in OpenProcess.

References

Published by the National Vulnerability Database

Aug 27, 2003

Published to the GitHub Advisory Database Apr 29, 2022

Last updated Jan 30, 2023