CVE-2003-0663: Unknown vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows 2000 domain cont...

Security readout for executives and security teams

This is a remote denial-of-service issue in LSASS on Windows 2000 domain controllers. A crafted LDAP message could disrupt authentication infrastructure. The sources do not provide CVSS data or evidence of active exploitation, but any remaining Windows 2000 domain controller should be treated as a high-risk legacy asset. Exposure is likely limited to organizations still operating Windows 2000 domain controllers or unpatched systems covered by MS04-011. Internet-facing LDAP or broad internal LDAP reachability would increase business impact. Prioritize this only if Windows 2000 domain controllers still exist. If present, treat it as urgent legacy risk because authentication outages can disrupt broad business operations. Mitigation focus: Identify any Windows 2000 domain controllers or systems covered by MS04-011.; Apply Microsoft MS04-011 guidance where applicable.; Retire or isolate unsupported Windows 2000 domain controller infrastructure..

Prepared

Jun 30, 2026, 06:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.