Secunia

A vulnerability has been identified in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system.

The cause of the vulnerability is twofold. The RPC service performs inadequate input validation before passing data to a DCOM (Distributed Component Object Model) interface. This interface has a boundary error in the "CoGetInstanceFromFile" API when handling the "szName" parameter, which can be exploited by sending a RPC packet containing an overly long, specially crafted filename.

Successful exploitation may cause a buffer overflow allowing execution of arbitrary code on the vulnerable system with "LocalSystem" privileges.

It has been reported that this vulnerability may be exploited through the following ports:
135/udp, 135/tcp, 139/tcp, 445/tcp, 593/tcp

Depending on your configuration, other RPC enabled ports could possibly open attack vectors too.

Solution
Apply patch via WindowsUpdate or manually (NOTE: Reportedly, the patch for Windows 2000 doesn't fix the vulnerability adequately).
Further details available in Customer Area

Provided and/or discovered by
The Last Stage of Delirium Research Group

Changelog
Further details available in Customer Area

Original Advisory
http://www.microsoft.com/technet/security/bulletin/MS03-026.asp

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area