PT-2008-5338 · Microsoft · Windows 2000 Sp4+1

Paul Miseiko · Publicado 2008-10-15 · Atualizado 2018-10-12 · CVE-2008-4023

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 SP4

Description The issue is related to Active Directory in Microsoft Windows, where it does not properly allocate memory for LDAP and LDAPS requests. This allows remote attackers to execute arbitrary code via a crafted request.

Recommendations For Microsoft Windows 2000 SP4, apply the necessary patch to fix the memory allocation issue in Active Directory.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2008-4023

Produtos afetados

Active Directory

Windows 2000 Sp4

Referências · 10

• http://securityfocus.com/bid/31609 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45585 · Nota
• http://marc.info/?l=bugtraq&m=122479227205998&w=2 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/2811 · Nota
• http://us-cert.gov/cas/techalerts/TA08-288A.html · Nota
• http://securitytracker.com/id?1021042 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6107 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-060 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-4023 · Nota de Segurança
• http://secunia.com/advisories/32242 · Aviso do Fabricante