CVE-2004-0894 Information

Description

LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly validate connection information which allows local users to gain privileges via a specially-designed program.

Reference

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-044 https://exchange.xforce.ibmcloud.com/vulnerabilities/18340 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A1888 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A2062 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A3312 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A3325 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A4368 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A778