116 matches found
March 14, 2017—KB4013429 (OS Build 14393.953)
None None...
Microsoft Windows LSASS Denial of Service Vulnerability
Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Local Security Authority Subsystem Service LSASS is one of the local security authentication subsystem services. A denial of service vulnerability exists in Microsoft Windows LSASS. An attacker can...
January 2017 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1
January 2017 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This security update resolves the following vulnerabilities in Windows: MS17-004 Security Update for Local Security Authority Subsystem Service 3216771 This security update also includes...
MS17-004: Description of the security update for Local Security Authority Subsystem Service: January 10, 2017
None None...
MS17-004: Security update for Local Security Authority Subsystem Service: January 10, 2017
Resolves a vulnerability in Windows that could allow denial of service by changing the way that LSASS handles specially crafted authentication requests.SummaryA denial of service vulnerability exists in the way that the Local Security Authority Subsystem Service LSASS handles authentication...
MS17-004: Security Update for Local Security Authority Subsystem Service (3216771)
The remote Windows host is missing a security update. It is, therefore, affected by a denial of service vulnerability in the Local Security Authority Subsystem Service LSASS component due to improper handling of authentication requests. An unauthenticated, remote attacker can exploit this to...
Microsoft Windows Authentication Methods Multiple Vulnerabilities (3199173)
This host is missing an important security update according to Microsoft Bulletin MS16-137. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows LSASS Length Validation Privilege Escalation (MS11-014; CVE-2011-0039)
The Local Security Authority Subsystem Service LSASS provides an interface for managing local security, domain authentication, and Active Directory service processes. It handles authentication for the client and for the server. An elevation of privilege vulnerability has been reported in the way...
CVE-2011-0039
The CVE-2011-0039 entry describes an elevation-of-privilege flaw in the Local Security Authority Subsystem Service (LSASS) on Windows XP SP2/SP3 and Windows Server 2003 SP2. The issue arises when LSASS processes specially crafted authentication requests with a manipulated length, enabling local u...
MS11-014: Vulnerability in Local Security Authority Subsystem Service Could Allow Local Elevation of Privilege (2478960)
The remote host allows elevation of privileges through its Local Security Authority Subsystem Service LSASS due to a failure to properly process specially crafted authentication requests. An attacker who has the ability to log on to the affected host can leverage this issue to gain full...
MS10-068: Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege (983539)
The version of the Local Security Authority Subsystem Service LSASS installed on the remote Windows host does not properly handle malformed packets in LDAP messages when used in conjunction with Microsoft Active Directory / Active Directory Application Mode / Active Directory Lightweight Director...
MS09-059: Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service (975467)
The version of LSASS running on the remote host has an integer overflow vulnerability. A remote attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42115; scriptversion"1.23";...
Cross site request forgery (csrf)
Unspecified vulnerability in Local Security Authority Subsystem Service LSASS in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call LPC request...
CVE-2004-0894
CVE-2004-0894 is a local elevation-of-privilege issue in LSASS on Microsoft Windows 2000 Server and Windows Server 2003. The vulnerability stems from incomplete validation of connection information by LSASS, allowing a locally authenticated user to gain complete control of the system by running a...
