378 matches found
PT-2010-2546 · Microsoft · Windows Xp +7
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 Gold, SP2, and R2 Microsoft Windows XP SP2 and SP3 Microsoft Windows Vista SP2 Microsoft Windows 7 Microsoft Windows Server 2008 Gold, SP2, and R2 Active Directory Application Mo...
MS10-068: Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege (983539)
The version of the Local Security Authority Subsystem Service LSASS installed on the remote Windows host does not properly handle malformed packets in LDAP messages when used in conjunction with Microsoft Active Directory / Active Directory Application Mode / Active Directory Lightweight Director...
MS09-059: Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service (975467)
The version of LSASS running on the remote host has an integer overflow vulnerability. A remote attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42115; scriptversion"1.23";...
Microsoft LSASS Authentication Process Integer Overflow (MS09-059; CVE-2009-2524)
LSASS provides an interface for managing local security, domain authentication, and Active Directory service processes. It handles authentication for the client and for the server. An elevation of privilege vulnerability has been discovered in the Microsoft Windows Local Security Authority...
Cross site request forgery (csrf)
Unspecified vulnerability in Local Security Authority Subsystem Service LSASS in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call LPC request...
[Full-disclosure] Windows Oday release
dear all SChannel Off-By-One Heap Corruption =================================== Discovery Date: 28th August 2006 Date reported to Microsoft: 19th March 2007 Summary: The Secure Channel SChannel library on WinXP-SP1/SP2 is vulnerable to a off-by-one heap buffer overwrite. The SChannel library...
CVE-2004-0894
CVE-2004-0894 is a local elevation-of-privilege issue in LSASS on Microsoft Windows 2000 Server and Windows Server 2003. The vulnerability stems from incomplete validation of connection information by LSASS, allowing a locally authenticated user to gain complete control of the system by running a...
Microsoft Windows LSASS Connection Validation Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege escalation vulnerability through LSASS Local Security Authority Subsystem Service. The vulnerability appears to be due to an error in the implementation of an enhanced access control feature. Attackers can exploit this vulnerability to...
CVE-2003-0663
Unknown vulnerability in the Local Security Authority Subsystem Service LSASS in Windows 2000 domain controllers allows remote attackers to cause a denial of service via a crafted LDAP message...
VulnCheck KEV: CVE-2003-0533
Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service LSASS in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute...
CVE-2003-0533
Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service LSASS in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute...
CVE-2003-0663
Unknown vulnerability in the Local Security Authority Subsystem Service LSASS in Windows 2000 domain controllers allows remote attackers to cause a denial of service via a crafted LDAP message...
[Full-Disclosure] EEYE: Windows Local Security Authority Service Remote Buffer Overflow
Windows Local Security Authority Service Remote Buffer Overflow Release Date: April 13, 2004 Date Reported: October 8, 2003 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Windows XP Description: eEye Digital Security has discovered a remote buffer overflow i...
CVE-1999-0995
Windows NT Local Security Authority LSA allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."...
CVE-1999-0721
Denial of service in Windows NT Local Security Authority LSA through a malformed LSA request...
CVE-1999-0995
Windows NT Local Security Authority LSA allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."...
