Sploitus

Exploit for Windows LSASS buffer overflow

CVE-2003-0533

saint · 2006-04-04

Exploit Code

MARKDOWN32 lines
## https://sploitus.com/exploit?id=SAINT:04F8251239EDE4CB34EFB471D436588E
Added: 04/04/2006  
CVE: [CVE-2003-0533](<https://vulners.com/cve/CVE-2003-0533>)  
BID: [10108](<http://www.securityfocus.com/bid/10108>)  
OSVDB: [5248](<http://www.osvdb.org/5248>)  


### Background

The Local Security Authority Subsystem Service (LSASS) provides an interface for managing local security, domain authentication, and Active Directory processes. 

### Problem

A buffer overflow in the `**DsRolepInitializeLog**` function in the Windows LSASS service allows remote command execution. 

### Resolution

Apply the patch referenced in [Microsoft Security Bulletin 04-011](<http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx>). 

### References

<http://www.kb.cert.org/vuls/id/753212>  


### Limitations

This exploit may cause the target system to crash. 

### Platforms

Windows 2000  
Windows XP