CVE:CVE-2004-0894
CNNVD:CNNVD-200501-093
Microsoft Windows是微软公司的视窗操作系统。
Win2000 Server及Win2003 Server中的LSASS服务存在本地权限提升漏洞。
由于没有正确验证连接信息，本地用户可通过特别设计的程序，获取系统特权。
solution:Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,*:sp4,and avoid the version *:sp1,*:sp2,*:sp3,*:sp4; Upgrade microsoft windows_2003_server to a higher version than datacenter_64-bit:sp1_beta_1,enterprise,enterprise:sp1_beta_1,enterprise_64-bit,enterprise_64-bit:sp1_beta_1,r2,r2:sp1_beta_1,standard,standard:sp1_beta_1,web,web:sp1_beta_1,and avoid the version datacenter_64-bit:sp1_beta_1,enterprise,enterprise:sp1_beta_1,enterprise_64-bit,enterprise_64-bit:sp1_beta_1,r2,r2:sp1_beta_1,standard,standard:sp1_beta_1,web,web:sp1_beta_1; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,and avoid the version *:gold,*:sp1,*:sp2