Oval Definition:	oval:org.mitre.oval:def:12537
Revision Date: 2011-08-15 Version: 47 Title: LSASS Length Validation Vulnerability Description: The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka "LSASS Length Validation Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2011-0039 Platform(s): Microsoft Windows Server 2003 Microsoft Windows XP Product(s): Definition Synopsis Vulnerable Windows XP x86 SP3 Microsoft Windows XP (x86) SP3 is installed AND the version of lsasrv.dll is less than 5.1.2600.6058 OR Vulnerable Windows XP x64 SP2, Server 2003 x86/x64/ia64 SP2 Affected operating systems: Windows XP x64 SP2, Server 2003 x86/x64/ia64 SP2 Microsoft Windows XP x64 Edition SP2 is installed OR Microsoft Windows Server 2003 SP2 (x86) is installed OR Microsoft Windows Server 2003 SP2 (x64) is installed OR Microsoft Windows Server 2003 (ia64) SP2 is installed AND the version of lsasrv.dll is less than 5.2.3790.4806
BACK