CVE-2003-1233

CRITIQUE 9.8CVE-2003-1233 · Published 31/12/2003 · updated 16/06/2026

En bref

CVE-2003-1233 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant integrity protection driver (pedestalsoftware).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.6%, plus élevée que 76.4% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
integrity protection driver pedestalsoftware	`≤ 1.3`	No fix yet

Description

Pedestal Software Integrity Protection Driver (IPD) 1.3 and earlier allows privileged attackers, such as rootkits, to bypass file access restrictions to the Windows kernel by using the NtCreateSymbolicLinkObject function to create a symbolic link to (1) \Device\PhysicalMemory or (2) to a drive letter using the subst command.

References

archives.neohapsis.com/archives/bugtraq/2003-01/0017.html · Broken Link
archives.neohapsis.com/archives/bugtraq/2003-01/0018.html · Broken Link
secunia.com/advisories/7816 · Broken Link
phrack.org/show.php · Broken Link
securityfocus.com/bid/6511 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/10979 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free