vulnwire
7.5high

CVE-2003-0533in critical feed3 exploits

Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (…

Published 22 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
85.6%
percentile 100%
Public exploits
3
Exploit-DB

Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via a packet that causes the DsRolerUpgradeDownlevelServer function to create long debug entries for the DCPROMO.LOG log file, as exploited by the Sasser worm.

Exploit prediction (EPSS)

85.60% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

  • EDB-295 Microsoft Windows XP/2000 - 'Lsasrv.dll' Remote Universal (MS04-011) · remote · 2004-04-29
  • EDB-293 Microsoft Windows - 'Lsasrv.dll' RPC Remote Buffer Overflow (MS04-011) · remote · 2004-04-24
  • EDB-16368 Microsoft LSASS Service - DsRolerUpgradeDownlevelServer Overflow (MS04-011) (Metasploit) · remote · 2010-07-03

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • lists.grok.org.uk /pipermail/full-disclosure/2004-April/020069.html · mailing-list, x_refsource_FULLDISC, x_transferred
  • ciac.org /ciac/bulletins/o-114.shtml · third-party-advisory, government-resource, x_refsource_CIAC, x_transferred
  • eeye.com /html/Research/Advisories/AD20040413C.html · third-party-advisory, x_refsource_EEYE, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/15699 · vdb-entry, x_refsource_XF, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A919 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2004/ms04-011 · vendor-advisory, x_refsource_MS, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A898 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A883 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • us-cert.gov /cas/techalerts/TA04-104A.html · third-party-advisory, x_refsource_CERT, x_transferred
  • marc.info /?l=bugtraq&m=108325860431471&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/10108 · vdb-entry, x_refsource_BID, x_transferred
  • kb.cert.org /vuls/id/753212 · third-party-advisory, x_refsource_CERT-VN, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.