PT-2008-6258 · Microsoft · Windows Server 2003+2

Published 2008-11-17 · Updated 2018-10-30 · CVE-2008-5112

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 SP4 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 SP2

Description The issue concerns the LDAP server in Active Directory, which responds differently to failed bind attempts based on whether a user account exists and is permitted to login. This behavior allows remote attackers to enumerate valid usernames by sending a series of LDAP bind requests.

Recommendations For Microsoft Windows 2000 SP4, consider restricting access to the LDAP server to minimize the risk of exploitation. For Microsoft Windows Server 2003 SP1, restrict access to the LDAP server to minimize the risk of exploitation. For Microsoft Windows Server 2003 SP2, restrict access to the LDAP server to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2008-5112

Affected Products

Active Directory

Windows 2000

Windows Server 2003

References · 6

• 🔥 http://securityfocus.com/bid/32305 · Exploit
• 🔥 https://exploit-db.com/exploits/32586 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5112 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46628 · Note
• http://portcullis-security.com/294.php · Note
• http://labs.portcullis.co.uk/application/ldapuserenum · Note