Exploitation Summary
CVE-2003-0533 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 4 public exploits from researchers including Metasploit, houseofdabus, sbaa, including a Metasploit module exploits/windows/smb/ms04_011_lsass.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in the Microsoft LSASS service (CVE-2003-0533). It targets Windows 2000 and XP by sending a maliciously crafted DCERPC request to achieve remote code execution.
Description
Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via a packet that causes the DsRolerUpgradeDownlevelServer function to create long debug entries for the DCPROMO.LOG log file, as exploited by the Sasser worm.
Exploits (4)
This is a Metasploit module exploiting a stack buffer overflow in the Microsoft LSASS service (CVE-2003-0533). It targets Windows 2000 and XP by sending a maliciously crafted DCERPC request to achieve remote code execution.
This is a remote exploit for CVE-2003-0533, targeting a buffer overflow in Lsasrv.dll via RPC. It includes shellcode for both reverse and bind shells, and supports multiple Windows versions (XP, 2000).
This exploit targets a buffer overflow vulnerability in Lsasrv.dll (CVE-2003-0533) via RPC, allowing remote code execution on Windows 2000 and XP systems. It uses shellcode to establish a reverse shell connection to a specified IP and port.
This Metasploit module exploits a stack buffer overflow in the Microsoft LSASS service (CVE-2003-0533) via a crafted DCERPC request. It includes target-specific payload handling for Windows 2000 and XP, leveraging return addresses and NOP sleds to achieve remote code execution.