PT-2008-5351 · Microsoft · Windows Vista+5

Joshua Morin · Published 2008-10-14 · Updated 2023-12-07 · CVE-2008-4038

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008

Description A buffer underflow issue exists in the Server Message Block (SMB) protocol, allowing remote attackers to execute arbitrary code via a crafted filename in an SMB request. The vulnerability can be exploited when the share type is a disk, which by default requires authentication. Successful exploitation could allow an attacker to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows 2000 SP4, update to a newer version to mitigate the risk. For Microsoft Windows XP SP2 and SP3, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 SP1 and SP2, update to a newer version to mitigate the risk. For Microsoft Windows Vista Gold and SP1, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to disk shares to minimize the risk of exploitation.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-4038

Affected Products

Windows

Windows 2000

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

References · 13

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-063 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=122479227205998&w=2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4038 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2008-4038 · Security Note
• http://secunia.com/advisories/32249 · Vendor Advisory
• http://securityfocus.com/bid/31647 · Patch
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5787 · Note
• http://vupen.com/english/advisories/2008/2814 · Note
• http://securitytracker.com/id?1021049 · Note
• http://us-cert.gov/cas/techalerts/TA08-288A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-063 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45560 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45561 · Note