(MS10-068) Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege (983539)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: HIGH

  CVE Identifier: CVE-2010-0820

  Advisory Date: FEB 20, 2013

---

  DESCRIPTION

This security update addresses a vulnerability in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS). It could elevate the privilege once an attacker sent specially crafted Lightweight Directory Access Protocol (LDAP) messages to a listening LSASS server.

  TREND MICRO PROTECTION INFORMATION

For information on patches specific to the affected software, please refer to this Microsoft Web page.

  AFFECTED SOFTWARE AND VERSION

• Windows 7 for 32-bit Systems
• Windows 7 for x64-based Systems
• Windows Server 2003 Service Pack 2
• Windows Server 2003 with SP2 for Itanium-based Systems
• Windows Server 2003 x64 Edition Service Pack 2
• Windows Server 2008 for 32-bit Systems
• Windows Server 2008 for 32-bit Systems Service Pack 2
• Windows Server 2008 for x64-based Systems
• Windows Server 2008 for x64-based Systems Service Pack 2
• Windows Server 2008 R2 for x64-based Systems
• Windows XP Professional x64 Edition Service Pack 2
• Windows XP Service Pack 3

Related Vulnerability

• September 2010 - Microsoft Releases 9 Security Advisories