Microsoft Windows LSASS Length Validation Privilege Escalation (MS11-014; CVE-2011-0039)

The Local Security Authority Subsystem Service LSASS provides an interface for managing local security, domain authentication, and Active Directory service processes. It handles authentication for the client and for the server. An elevation of privilege vulnerability has been reported in the way...

MS11-014: Vulnerability in Local Security Authority Subsystem Service Could Allow Local Elevation of Privilege (2478960)

The remote host allows elevation of privileges through its Local Security Authority Subsystem Service LSASS due to a failure to properly process specially crafted authentication requests. An attacker who has the ability to log on to the affected host can leverage this issue to gain full...