CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-0894

LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a specially-designed program.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.017

EPSS Ranking 81.4%

CVSS Severity

CVSS v2 Score 7.2

References

Products affected by CVE-2004-0894

Microsoft » Windows 2000 » Version: N/A

cpe:2.3:o:microsoft:windows_2000:-
Microsoft » Windows 2000 » Version: beta3

cpe:2.3:o:microsoft:windows_2000:beta3
Microsoft » Windows 2003 Server » Version: datacenter_64-bit

cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit
Microsoft » Windows 2003 Server » Version: enterprise

cpe:2.3:o:microsoft:windows_2003_server:enterprise
Microsoft » Windows 2003 Server » Version: enterprise_64-bit

cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit
Microsoft » Windows 2003 Server » Version: r2

cpe:2.3:o:microsoft:windows_2003_server:r2
Microsoft » Windows 2003 Server » Version: standard

cpe:2.3:o:microsoft:windows_2003_server:standard
Microsoft » Windows 2003 Server » Version: web

cpe:2.3:o:microsoft:windows_2003_server:web
Microsoft » Windows Xp » Version: Any

cpe:2.3:o:microsoft:windows_xp:*
Microsoft » Windows Xp » Version: N/A

cpe:2.3:o:microsoft:windows_xp:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-0894

Products

Pricing

Contact Us