Lucene search
HistoryFeb 09, 2011 - 1:00 a.m.
CVE-2011-0039
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
38.8%
The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka “LSASS Length Validation Vulnerability.”
Affected configurations
Node
microsoftwindows_2003_serversp2
ORmicrosoftwindows_2003_serversp2itanium
ORmicrosoftwindows_2003_serversp2x64
ORmicrosoftwindows_xpsp3
ORmicrosoftwindows_xpMatch-sp2x64
References
Related
prion
prion
Input validation
2011-02-09 01:00:00
cvelist
cvelist
CVE-2011-0039
2011-02-09 00:00:00
cve
cve
CVE-2011-0039
2011-02-09 01:00:08
openvas
openvas
Microsoft Windows LSASS Privilege Escalation Vulnerability (2478960)
2011-02-09 00:00:00
Microsoft Windows LSASS Privilege Escalation Vulnerability (2478960)
2011-02-09 00:00:00
nessus
nessus
checkpoint_advisories
checkpoint_advisories
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2011-02-14 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
38.8%
Related for NVD:CVE-2011-0039