Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*

part: o version: - update: sp2

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductWindows 2003 Server (4e1b015d-7054-5cfc-afa2-31769d6028d9)
Editionx64
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-1886 vulnerable 2026-06-08 04:54:10.892033 Details available
Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature. NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a "security boundary."
Published: 2010-08-16T18:25:00.000Z
Updated: 2024-09-16T20:36:20.103Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0231 vulnerable 2026-06-08 04:51:53.615506 Details available
The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain access to files and other SMB resources via a large number of authentication requests, related to server-generated challenges, certain "duplicate values," and spoofing of an authentication token, aka "SMB NTLM Authentication Lack of Entropy Vulnerability."
Published: 2010-02-10T18:00:00.000Z
Updated: 2024-08-07T00:45:11.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0022 vulnerable 2026-06-08 04:51:52.352532 Details available
The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate the share and servername fields in SMB packets, which allows remote attackers to cause a denial of service (system hang) via a crafted packet, aka "SMB Null Pointer Vulnerability."
Published: 2010-02-10T18:00:00.000Z
Updated: 2024-08-07T00:37:52.442Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0021 vulnerable 2026-06-08 04:51:52.351764 Details available
Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 Negotiate packet, aka "SMB Memory Corruption Vulnerability."
Published: 2010-02-10T18:00:00.000Z
Updated: 2025-01-21T16:49:29.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0020 vulnerable 2026-06-08 04:51:52.348103 Details available
The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate request fields, which allows remote authenticated users to execute arbitrary code via a malformed request, aka "SMB Pathname Overflow Vulnerability."
Published: 2010-02-10T18:00:00.000Z
Updated: 2024-08-07T00:37:53.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3675 vulnerable 2026-06-08 04:51:43.590642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1924 vulnerable 2026-06-08 04:51:25.767025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1923 vulnerable 2026-06-08 04:51:25.766552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3008 vulnerable 2026-06-08 04:50:32.818332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0020 vulnerable 2026-06-08 04:50:09.965307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0015 vulnerable 2026-06-08 04:50:09.942824 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.