Buffer Overflow Vulnerability in Microsoft Windows LSASS Service

CVE-2003-0533

What is CVE-2003-0533?

A stack-based buffer overflow exists in the Local Security Authority Subsystem Service (LSASS) of Microsoft Windows systems, including Windows NT and Windows 2000 editions. It arises from improper handling of packets that generate excessive debug entries in the DCPROMO.LOG file. This overflow can enable remote attackers to execute arbitrary code, leading to potential unauthorized access and control of affected systems, exemplified by exploitation techniques used in the Sasser worm.

References