CVE-2003-1233

CRITICAL 9.8CVE-2003-1233 · Published 31/12/2003 · updated 16/06/2026

In short

CVE-2003-1233 is a CRITICAL (CVSS 9.8) vulnerability affecting integrity protection driver (pedestalsoftware).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
integrity protection driver pedestalsoftware	`≤ 1.3`	No fix yet

Description

Pedestal Software Integrity Protection Driver (IPD) 1.3 and earlier allows privileged attackers, such as rootkits, to bypass file access restrictions to the Windows kernel by using the NtCreateSymbolicLinkObject function to create a symbolic link to (1) \Device\PhysicalMemory or (2) to a drive letter using the subst command.

References

archives.neohapsis.com/archives/bugtraq/2003-01/0017.html · Broken Link
archives.neohapsis.com/archives/bugtraq/2003-01/0018.html · Broken Link
secunia.com/advisories/7816 · Broken Link
phrack.org/show.php · Broken Link
securityfocus.com/bid/6511 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/10979 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free