Microsoft LSASS Authentication Process Integer Overflow (MS09-059; CVE-2009-2524) - high confidence

An elevation of privilege vulnerability has been discovered in the Microsoft Windows Local Security Authority Subsystem Service LSASS. The vulnerability is due to the Windows NTLM implementation in LSASS improper handling of malformed packets during NTLM authentication. A remote attacker could...

USN-1171-1: Likewise Open vulnerability

It was discovered that an SQL injection vulnerability exists in the Likewise Security Authority lsass local authentication provider. A local attacker could use this to gain elevated privileges...

Microsoft Windows LSASS Length Validation Privilege Escalation (MS11-014; CVE-2011-0039)

The Local Security Authority Subsystem Service LSASS provides an interface for managing local security, domain authentication, and Active Directory service processes. It handles authentication for the client and for the server. An elevation of privilege vulnerability has been reported in the way...

CVE-2011-0039

The Local Security Authority Subsystem Service LSASS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka "LSASS Length Validation Vulnerability."...

CVE-2011-0039

The CVE-2011-0039 entry describes an elevation-of-privilege flaw in the Local Security Authority Subsystem Service (LSASS) on Windows XP SP2/SP3 and Windows Server 2003 SP2. The issue arises when LSASS processes specially crafted authentication requests with a manipulated length, enabling local u...

Microsoft Windows LSASS Privilege Escalation Vulnerability (2478960)

This host is missing a critical security update according to Microsoft Bulletin MS11-014. OpenVAS Vulnerability Test $Id: secpodms11-014.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows LSASS Privilege Escalation Vulnerability 2478960 Authors: Antu Sanadi Copyright: Copyright c 2011 SecPod,...

Microsoft Windows LSASS Privilege Escalation Vulnerability (2478960)

This host is missing a critical security update according to Microsoft Bulletin MS11-014. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows LSASS Length Validation Local Privilege Escalation Vulnerability

Description Microsoft Windows LSASS is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may caus...

Microsoft Windows SChannel Denial of Service Vulnerability (2207566)

This host is missing a critical security update according to Microsoft Bulletin MS10-085. OpenVAS Vulnerability Test $Id: secpodms10-085.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows SChannel Denial of Service Vulnerability 2207566 Authors: Sooraj KS Copyright: Copyright c 2010 SecPod,...

MS10-085: Vulnerability in SChannel Could Allow Denial of Service (2207566)

The remote Windows host is running a version of the Secure Channel SChannel security package that is affected by a denial of service vulnerability. This flaw exists in the way that SChannel processes client certificates. A remote attacker could send a specially crafted network packet to the host...

Microsoft Windows SChannel Denial of Service Vulnerability (2207566)

This host is missing a critical security update according to Microsoft Bulletin MS10-085. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft SChannel TLSv1 Denial of Service (MS10-085; CVE-2010-3229)

The Secure Channel SChannel security package is a Security Support Provider SSP that implements the Secure Sockets Layer SSL and Transport Layer Security TLS Internet standard authentication protocols. SChannel is part of the security package that helps provide an authentication service to provid...

CVE-2010-0820

Heap-based buffer overflow in the Local Security Authority Subsystem Service LSASS, as used in Active Directory in Microsoft Windows Server 2003 SP2 and Windows Server 2008 Gold, SP2, and R2; Active Directory Application Mode ADAM in Windows XP SP2 and SP3 and Windows Server 2003 SP2; and Active...

Heap overflow

Heap-based buffer overflow in the Local Security Authority Subsystem Service LSASS, as used in Active Directory in Microsoft Windows Server 2003 SP2 and Windows Server 2008 Gold, SP2, and R2; Active Directory Application Mode ADAM in Windows XP SP2 and SP3 and Windows Server 2003 SP2; and Active...

CVE-2010-0820

Heap-based buffer overflow in the Local Security Authority Subsystem Service LSASS, as used in Active Directory in Microsoft Windows Server 2003 SP2 and Windows Server 2008 Gold, SP2, and R2; Active Directory Application Mode ADAM in Windows XP SP2 and SP3 and Windows Server 2003 SP2; and Active...

CVE-2010-0820

CVE-2010-0820 is an LSASS heap overflow vulnerability affecting Active Directory, ADAM, and AD LDS. An authenticated attacker could exploit specially crafted LDAP messages sent to a listening LSASS service to achieve code execution with elevated privileges. The vulnerability impacts multiple Wind...

CVE-2010-0820

Heap-based buffer overflow in the Local Security Authority Subsystem Service LSASS, as used in Active Directory in Microsoft Windows Server 2003 SP2 and Windows Server 2008 Gold, SP2, and R2; Active Directory Application Mode ADAM in Windows XP SP2 and SP3 and Windows Server 2003 SP2; and Active...

Microsoft Security Bulletin MS10-068 - Important Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege (983539)

Microsoft Security Bulletin MS10-068 - Important Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege 983539 Published: September 14, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability ...

MS Local Security Authority Subsystem Service Privilege Elevation Vulnerability (983539)

This host is missing a critical security update according to Microsoft Bulletin MS10-068. OpenVAS Vulnerability Test $Id: secpodms10-068.nasl 5361 2017-02-20 11:57:13Z cfi $ MS Local Security Authority Subsystem Service Privilege Elevation Vulnerability 983539 Authors: Antu Sanadi Copyright:...

Microsoft Local Security Authority Subsystem Service Privilege Elevation Vulnerability (983539)

This host is missing a critical security update according to Microsoft Bulletin MS10-068. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...