CVE Database
/

CVE-2009-3675

Back to search

CVE-2009-3675

Published: Dec 9, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote authenticated users to cause a denial of service (CPU consumption) via a malformed ISAKMP request over IPsec, aka "Local Security Authority Subsystem Service Resource Exhaustion Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

MS09-069
vendor-advisory
x_refsource_MS
oval:org.mitre.oval:def:6639
vdb-entry
signature
x_refsource_OVAL
TA09-342A
third-party-advisory
x_refsource_CERT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now