PT-2008-1743 · Microsoft · Windows 2000+4

Thomas Garnier · Published 2008-02-12 · Updated 2019-04-30 · CVE-2008-0088

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows XP with Active Directory Application Mode (ADAM)

Description The issue allows remote attackers to cause a denial of service, resulting in the system hanging and restarting, via a crafted LDAP request to Active Directory or Active Directory Application Mode (ADAM).

Recommendations For Microsoft Windows 2000, update to a version that includes the fix for this issue. For Microsoft Windows Server 2003, update to a version that includes the fix for this issue. For Microsoft Windows XP with Active Directory Application Mode (ADAM), update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the LDAP endpoint to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-0088

Affected Products

Active Directory

Active Directory Application Mode

Windows 2000

Windows Server 2003

Windows Xp

References · 9

• http://marc.info/?l=bugtraq&m=120361015026386&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0088 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-003 · Vendor Advisory
• http://secunia.com/advisories/28764 · Note
• http://vupen.com/english/advisories/2008/0505/references · Note
• http://us-cert.gov/cas/techalerts/TA08-043C.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5181 · Note
• http://securityfocus.com/bid/27638 · Note
• http://securitytracker.com/id?1019382 · Note