CVE-2009-3675
Severity:
Pending analysis
Type:
CWE-399
Resource Management Errors
Publication date:
09/12/2009
Last modified:
30/10/2018
Description
LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote authenticated users to cause a denial of service (CPU consumption) via a malformed ISAKMP request over IPsec, aka "Local Security Authority Subsystem Service Resource Exhaustion Vulnerability."
Impact
Base Score 2.0
6.80
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:microsoft:windows_2000:sp4:*:*:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2003_server:-:sp2:itanium:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page