PT-2008-1743 · Microsoft · Windows 2000+4

Thomas Garnier · Publicado 2008-02-12 · Atualizado 2019-04-30 · CVE-2008-0088

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows XP with Active Directory Application Mode (ADAM)

Description The issue allows remote attackers to cause a denial of service, resulting in the system hanging and restarting, via a crafted LDAP request to Active Directory or Active Directory Application Mode (ADAM).

Recommendations For Microsoft Windows 2000, update to a version that includes the fix for this issue. For Microsoft Windows Server 2003, update to a version that includes the fix for this issue. For Microsoft Windows XP with Active Directory Application Mode (ADAM), update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the LDAP endpoint to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-0088

Produtos afetados

Active Directory

Active Directory Application Mode

Windows 2000

Windows Server 2003

Windows Xp

Referências · 9

• http://secunia.com/advisories/28764 · Nota
• http://marc.info/?l=bugtraq&m=120361015026386&w=2 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/0505/references · Nota
• http://us-cert.gov/cas/techalerts/TA08-043C.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5181 · Nota
• http://securityfocus.com/bid/27638 · Nota
• http://securitytracker.com/id?1019382 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0088 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-003 · Aviso do Fabricante