PT-2008-5338 · Microsoft · Windows 2000 Sp4+1

Paul Miseiko · Published 2008-10-15 · Updated 2018-10-12 · CVE-2008-4023

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 SP4

Description The issue is related to Active Directory in Microsoft Windows, where it does not properly allocate memory for LDAP and LDAPS requests. This allows remote attackers to execute arbitrary code via a crafted request.

Recommendations For Microsoft Windows 2000 SP4, apply the necessary patch to fix the memory allocation issue in Active Directory.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-4023

Affected Products

Active Directory

Windows 2000 Sp4

References · 10

• http://securityfocus.com/bid/31609 · Patch
• http://marc.info/?l=bugtraq&m=122479227205998&w=2 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-060 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4023 · Security Note
• http://secunia.com/advisories/32242 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45585 · Note
• http://vupen.com/english/advisories/2008/2811 · Note
• http://us-cert.gov/cas/techalerts/TA08-288A.html · Note
• http://securitytracker.com/id?1021042 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6107 · Note