NetSight
IP …
high7.5Public exploit code

CVE-2003-0533

Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via a packet that causes the DsRolerUpgradeDownlevelServer function to create long debug entries for the DCPROMO.LOG log file, as exploited by the Sasser worm.

Affected products

VendorProductAffected versions
MicrosoftNetmeeting
All versions
MicrosoftWindows 2000
All versions
MicrosoftWindows 2003 Server
Version r2
MicrosoftWindows 98
All versions
MicrosoftWindows Me
All versions
MicrosoftWindows Nt
Version 4.0
MicrosoftWindows Xp
All versions

References