CVEvulnerability
CVE-2011-0039
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-02-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka "LSASS Length Validation Vulnerability."
Affected configurations
• microsoft windows 2003 server
• microsoft windows xp
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://secunia.com/advisories/43253 Vendor Advisory
- http://www.securityfocus.com/bid/46152 www.securityfocus.com
- http://www.securitytracker.com/id?1025049 www.securitytracker.com
- http://www.vupen.com/english/advisories/2011/0327 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-014 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12537 oval.cisecurity.org
- http://secunia.com/advisories/43253 Vendor Advisory
- http://www.securityfocus.com/bid/46152 www.securityfocus.com
- http://www.securitytracker.com/id?1025049 www.securitytracker.com
- http://www.vupen.com/english/advisories/2011/0327 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-014 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12537 oval.cisecurity.org