PT-2008-6258 · Microsoft · Windows Server 2003+2

Publicado 2008-11-17 · Atualizado 2018-10-30 · CVE-2008-5112

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 SP4 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 SP2

Description The issue concerns the LDAP server in Active Directory, which responds differently to failed bind attempts based on whether a user account exists and is permitted to login. This behavior allows remote attackers to enumerate valid usernames by sending a series of LDAP bind requests.

Recommendations For Microsoft Windows 2000 SP4, consider restricting access to the LDAP server to minimize the risk of exploitation. For Microsoft Windows Server 2003 SP1, restrict access to the LDAP server to minimize the risk of exploitation. For Microsoft Windows Server 2003 SP2, restrict access to the LDAP server to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2008-5112

Produtos afetados

Active Directory

Windows 2000

Windows Server 2003

Referências · 6

• 🔥 http://securityfocus.com/bid/32305 · Exploit
• 🔥 https://exploit-db.com/exploits/32586 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46628 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5112 · Nota de Segurança
• http://portcullis-security.com/294.php · Nota
• http://labs.portcullis.co.uk/application/ldapuserenum · Nota