Sploitus

Exploit for Windows LSASS buffer overflow

saint Β· 2006-04-04

Exploit Code

MARKDOWN32 lines
## https://sploitus.com/exploit?id=SAINT:C4D3EEBFA43B91B5A4802CEE44392E41
Added: 04/04/2006  
CVE: CVE-2003-0533  
BID: 10108  
OSVDB: 5248  


### Background

The Local Security Authority Subsystem Service (LSASS) provides an interface for managing local security, domain authentication, and Active Directory processes. 

### Problem

A buffer overflow in the `**DsRolepInitializeLog**` function in the Windows LSASS service allows remote command execution. 

### Resolution

Apply the patch referenced in Microsoft Security Bulletin 04-011. 

### References

http://www.kb.cert.org/vuls/id/753212   


### Limitations

This exploit may cause the target system to crash. 

### Platforms

Windows 2000  
Windows XP