PT-2002-3040 · Openldap+2 · Ldap+4

Published 2002-12-31 · Updated 2019-04-30 · CVE-2002-2328

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Windows 2000

Description The issue concerns Active Directory in Windows 2000, specifically when it supports Kerberos V authentication and GSSAPI. A remote attacker can cause a denial of service, leading to a system hang, by using an LDAP client to set the page length to zero during a large request.

Recommendations For Windows 2000, consider restricting access to the LDAP service to minimize the risk of exploitation until a fix is available. Avoid using the LDAP client to set the page length to zero during large requests.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2002-2328

Affected Products

Active Directory

Gssapi

Kerberos

Ldap

Windows 2000

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-2328 · Security Note
• http://iss.net/security_center/static/9159.php · Note
• http://online.securityfocus.com/archive/1/273771 · Note
• http://securityfocus.com/bid/4804 · Note