Local Module Loading Vulnerability in WatchGuard ServerLock for Windows 2000

CVE-2003-0641

Summary

The vulnerability in WatchGuard ServerLock for Windows 2000 prior to version SL 2.0.3 allows local users to exploit the OpenProcess() function to load arbitrary modules. This exploitation can occur through various methods, including DLL injection attacks, the use of ZwSetSystemInformation, and API hooking techniques within the OpenProcess context. As a result, unauthorized code execution may be possible, leading to potential system compromises.

References