CVE-2004-0894

CVE-2004-0894 describes a privilege escalation vulnerability in the Local Security Authority Subsystem Service (LSASS) of Microsoft Windows 2000 Server, Windows Server 2003, and Windows XP. The flaw stems from improper validation of connection information, allowing a local attacker to gain elevated privileges through a specially crafted program. This vulnerability carries a CVSS score of 7.2, indicating high severity due to its low attack complexity and complete impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit (EDB-749) is available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.