CVE-2003-0641: WatchGuard Serverlock

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

WatchGuard ServerLock for Windows 2000 before SL 2.0.3 allows local users to load arbitrary modules via the OpenProcess() function, as demonstrated using (1) a DLL injection attack, (2) ZwSetSystemInformation, and (3) API hooking in OpenProcess.

Affected products

• WatchGuard Serverlock: version 2.0 only; version 2.0.1 only; version 2.0.2 only

Published 2003-08-27. Last modified 2026-06-16.