CVE-2003-0533

2004-06-0104:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

134

cve-2003-0533

buffer overflow

lsasrv.dll

active directory

security vulnerability

sasser worm

nvd

microsoft windows

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.972 High

EPSS

Percentile

99.8%

JSON

Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via a packet that causes the DsRolerUpgradeDownlevelServer function to create long debug entries for the DCPROMO.LOG log file, as exploited by the Sasser worm.

CPENameOperatorVersion
microsoft:netmeetingmicrosoft netmeetingeq*
microsoft:windows_2000microsoft windows 2000eq*
microsoft:windows_xpmicrosoft windows xpeq*
microsoft:windows_ntmicrosoft windows nteq4.0
microsoft:windows_2003_servermicrosoft windows 2003 servereqr2
microsoft:windows_memicrosoft windows meeq*
microsoft:windows_98microsoft windows 98eq*

CPE	Name	Operator	Version
microsoft:netmeeting	microsoft netmeeting	eq	*
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:windows_xp	microsoft windows xp	eq	*
microsoft:windows_nt	microsoft windows nt	eq	4.0
microsoft:windows_2003_server	microsoft windows 2003 server	eq	r2
microsoft:windows_me	microsoft windows me	eq	*
microsoft:windows_98	microsoft windows 98	eq	*