CVE-2003-1121

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-12-31 · updated 2026-06-16

Description

Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, which allows remote attackers to (1) modify arbitrary registry entries via the ScriptLogic RPC service (SLRPC) or (2) modify arbitrary configuration via the RunAdmin services (SLRAserver.exe and SLRAclient.exe).

References

http://www.kb.cert.org/vuls/id/231705
http://www.kb.cert.org/vuls/id/609137
http://www.kb.cert.org/vuls/id/CRDY-5EXQRP
http://www.kb.cert.org/vuls/id/CRDY-5EXQSV
http://www.securityfocus.com/bid/7475
http://www.securityfocus.com/bid/7477
https://exchange.xforce.ibmcloud.com/vulnerabilities/11920
https://exchange.xforce.ibmcloud.com/vulnerabilities/11921
http://www.kb.cert.org/vuls/id/231705
http://www.kb.cert.org/vuls/id/609137
http://www.kb.cert.org/vuls/id/CRDY-5EXQRP
http://www.kb.cert.org/vuls/id/CRDY-5EXQSV

Get alerted when CVE-2003-1121 or the next vulnerability affects your stack