Unscored severity · published Jun 1, 2004
CVE-2003-0533
Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a,…
–
CVSS
85.5%
EPSS
No
On KEV
Description
Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via a packet that causes the DsRolerUpgradeDownlevelServer function to create long debug entries for the DCPROMO.LOG log file, as exploited by the Sasser worm.
Exploitation
Is it being used?
Exploit prediction (EPSS)85.5% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netmeeting · Microsoft
All versions, or not specified · source: NVD
W2
Windows 2000 · Microsoft
All versions, or not specified · source: NVD
W2
Windows 2003 Server · Microsoft
r2 · source: NVD
W9
Windows 98 · Microsoft
All versions, or not specified · source: NVD
WM
Windows ME · Microsoft
All versions, or not specified · source: NVD
WN
Windows NT · Microsoft
4.0 · source: NVD
WX
Windows XP · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0533
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0533
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020069.html
marc.info
http://marc.info/?l=bugtraq&m=108325860431471&w=2
www.ciac.org
http://www.ciac.org/ciac/bulletins/o-114.shtml
www.eeye.com
http://www.eeye.com/html/Research/Advisories/AD20040413C.html
Patch
http://www.kb.cert.org/vuls/id/753212
www.securityfocus.com
http://www.securityfocus.com/bid/10108
More from Netmeeting
–
CVE-2006-2919
Unspecified vulnerability in Microsoft NetMeeting 3.01 allows remote attackers to cause a denial of service (crash or CPU consumption) and possibly execute arbitrary code via…
–
CVE-2004-0117
Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code
–
CVE-2003-0719
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4,…
–
CVE-2003-0505
Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer…
–
CVE-2003-0506
Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malformed packets, as demonstrated via the…