Vulnerability in N/a
CVE-2003-0533
Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Wind…
EPSS: 0.890 (99.5th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 20040413 EEYE: Windows Local Security Authority Service Remote Buffer Overflow (mailing-list, x_refsource_FULLDISC)
- O-114 (government-resource, third-party-advisory, x_refsource_CIAC)
- AD20040413C (third-party-advisory, x_refsource_EEYE)
- win-lsass-bo(15699) (vdb-entry, x_refsource_XF)
- oval:org.mitre.oval:def:919 (signature, x_refsource_OVAL, vdb-entry)
- MS04-011 (x_refsource_MS, vendor-advisory)
- oval:org.mitre.oval:def:898 (signature, x_refsource_OVAL, vdb-entry)
- oval:org.mitre.oval:def:883 (signature, x_refsource_OVAL, vdb-entry)
- TA04-104A (x_refsource_CERT, third-party-advisory)
- 20040429 MS04011 Lsasrv.dll RPC buffer overflow remote exploit (PoC) (mailing-list, x_refsource_BUGTRAQ)
Frequently asked questions
- What is CVE-2003-0533?
- CVE-2003-0533 is a vulnerability in N/a. Published 2004-04-16.
- Is CVE-2003-0533 known to be exploited?
- 8 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.