CVE-2004-0894 LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a s...
HighCVSS 7.2
EPSS 3.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a specially-designed program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = datacenter_64-bit-sp1_beta_1 | No fix listed |
| Microsoft windows 2003 server | = enterprise | No fix listed |
| Microsoft windows 2003 server | = enterprise-sp1_beta_1 | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit-sp1_beta_1 | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = r2-sp1_beta_1 | No fix listed |
| Microsoft windows 2003 server | = standard | No fix listed |
| Microsoft windows 2003 server | = standard-sp1_beta_1 | No fix listed |
| Microsoft windows 2003 server | = web | No fix listed |
| Microsoft windows 2003 server | = web-sp1_beta_1 | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- MS04-044 vendor-advisory
- win-lsass-gain-privileges(18340) vdb-entry
- oval:org.mitre.oval:def:1888 signature vdb-entry
- oval:org.mitre.oval:def:2062 signature vdb-entry
- oval:org.mitre.oval:def:3312 signature vdb-entry
- oval:org.mitre.oval:def:3325 signature vdb-entry
- oval:org.mitre.oval:def:4368 signature vdb-entry
- oval:org.mitre.oval:def:778 signature vdb-entry