Microsoft Windows LSASS Length Validation Privilege Escalation (MS11-014; CVE-2011-0039)

The Local Security Authority Subsystem Service LSASS provides an interface for managing local security, domain authentication, and Active Directory service processes. It handles authentication for the client and for the server. An elevation of privilege vulnerability has been reported in the way...

CVE-2011-0039

The CVE-2011-0039 entry describes an elevation-of-privilege flaw in the Local Security Authority Subsystem Service (LSASS) on Windows XP SP2/SP3 and Windows Server 2003 SP2. The issue arises when LSASS processes specially crafted authentication requests with a manipulated length, enabling local u...

MS11-014: Vulnerability in Local Security Authority Subsystem Service Could Allow Local Elevation of Privilege (2478960)

The remote host allows elevation of privileges through its Local Security Authority Subsystem Service LSASS due to a failure to properly process specially crafted authentication requests. An attacker who has the ability to log on to the affected host can leverage this issue to gain full...