257 matches found
CVE-2007-5352
CVE-2007-5352 is a local privilege-escalation vulnerability in Microsoft Windows LSASS. The root cause is LSASS’s improper handling of specially crafted LPC requests, which could allow a local attacker to execute code with SYSTEM privileges and take full control of the affected system. Affected p...
CVE-2007-5352
Unspecified vulnerability in Local Security Authority Subsystem Service LSASS in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call LPC request...
MS08-002: Vulnerability in LSASS Could Allow Local Elevation of Privilege (943485)
The remote host is running version of Windows and LSASS that could allow a local user to gain elevated privileged. An attacker who has the ability to execute arbitrary commands on the remote host may exploit this flaw to gain SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"...
Microsoft Windows LSASS privilege escalation vulnerability
Overview The Windows LSASS service contains privilege escalation vulnerability. Description The Windows Local Security Authority Subsystem Service LSASS is a process that enforces the local security policy. Per Microsoft Security Bulletin MS08-002: An elevation of privilege vulnerability exists i...
Microsoft Windows LSASS LPC Request Local Privilege Escalation Vulnerability
Description Microsoft Windows Local Security Authority Subsystem Service LSASS is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will facilitate in the complete...
Without the lsass process to decrypt the system administrator password-vulnerability warning-the black bar safety net
【Original copyright, the Sadie Starter, cooperation website for reprint please indicate the source“newsdesk”and Article author! Decline of non-cooperation website reprint, the offender, the newsdesk will retain pursue its legal responsibility rights!】 Lsass. exe is a Windows system is an essentia...
No need to attack the lsass process to decrypt the system administrator password-vulnerability warning-the black bar safety net
Lsass. exe is a Windows system is an essential process belonging to the Microsoft Windows System in the security mechanisms of relevant processes. lsass. exe process is mainly used for local security and login policies, and also management of IP-related security information. The lsass. exe proces...
Novell NetWare 6.5 SP2-SP7 LSASS CIFS.NLM Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Novell NetWare 6.5 SP2-SP7 - LSASS CIFS.NLM Overflow (Metasploit)
Novell NetWare 6.5 SP2-SP7 - LSASS CIFS.NLM Overflow Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Novell NetWare 6.5 SP2-SP7 - LSASS CIFS.NLM Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Novell NetWare...
MS04-011 Microsoft LSASS Service DsRolerUpgradeDownlevelServer Overflow
This module exploits a stack buffer overflow in the LSASS service, this vulnerability was originally found by eEye. When re-exploiting a Windows XP system, you will need need to run this module twice. DCERPC request fragmentation can be performed by setting 'FragSize' parameter. This module...
Windows LSASS buffer overflow
Added: 04/04/2006 CVE: CVE-2003-0533 BID: 10108 OSVDB: 5248 Background The Local Security Authority Subsystem Service LSASS provides an interface for managing local security, domain authentication, and Active Directory processes. Problem A buffer overflow in the DsRolepInitializeLog function in t...
Windows LSASS buffer overflow
Added: 04/04/2006 CVE: CVE-2003-0533 BID: 10108 OSVDB: 5248 Background The Local Security Authority Subsystem Service LSASS provides an interface for managing local security, domain authentication, and Active Directory processes. Problem A buffer overflow in the DsRolepInitializeLog function in t...
Windows LSASS buffer overflow
Added: 04/04/2006 CVE: CVE-2003-0533 BID: 10108 OSVDB: 5248 Background The Local Security Authority Subsystem Service LSASS provides an interface for managing local security, domain authentication, and Active Directory processes. Problem A buffer overflow in the DsRolepInitializeLog function in t...
Windows LSASS buffer overflow
Added: 04/04/2006 CVE: CVE-2003-0533 BID: 10108 OSVDB: 5248 Background The Local Security Authority Subsystem Service LSASS provides an interface for managing local security, domain authentication, and Active Directory processes. Problem A buffer overflow in the DsRolepInitializeLog function in t...
Korgo worm detection
The remote host is probably infected with Korgo worm. It propagates by exploiting the LSASS vulnerability on TCP port 445 as described in Microsoft Security Bulletin MS04-011 and opens a backdoor on TCP ports 113 and 3067. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might b...
How to in Windows 2 0 0 3 to give the login password-vulnerability warning-the black bar safety net
In all NT systems, there are several ways you can get the login user's password. I know of three methods can achieve the purpose. 1. hook the winlogon in the several function, the Internet also has this type ofprogram, called winlogonhijack items in the rootkit. com has to offer, but that project...
Microsoft Active Directory LSASS Buffer Overflow (MS04-011; CVE-2003-0533)
The Local Security Authority Subsystem Service LSASS is used to manage security processes, including local permission and client/server authentication A vulnerability was detected in the LSASS service for several Microsoft Windows operating systems that can allow remote attackers to execute...
Multiple Microsoft Windows bugs
Kernel buffer overflow LSASS privilege escalation...
CVE-2004-0894
LSASS Local Security Authority Subsystem Service of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a specially-designed program...