CVE-2003-0507

CVE-2003-0507 describes a stack-based buffer overflow in Active Directory within Microsoft Windows 2000 prior to SP4. This vulnerability allows unauthenticated remote attackers to trigger a denial of service (system reboot) and potentially execute arbitrary code by sending a crafted LDAPv3 search request containing numerous "AND" or "OR" statements, causing the LSASS.EXE process to crash. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While the EPSS score indicates a moderate likelihood of exploitation, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this older vulnerability.