CVE-2011-0039 in Windows
Summary
The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka "LSASS Length Validation Vulnerability."
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
12/10/2010
Disclosure
02/08/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 4296 | Microsoft Windows LSASS improper authentication | 287 | Not defined | Official fix | CVE-2011-0039 |