CVE-2008-4023 Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka...
HighCVSS 10.0
EPSS 39.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka "Active Directory Overflow Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
References
- SSRT080143 vendor-advisory
- 32242 patch third-party-advisory vendor-advisory
- 31609 patch vdb-entry
- 1021042 vdb-entry
- TA08-288A third-party-advisory us-government-resource
- ADV-2008-2811 vdb-entry
- MS08-060 vendor-advisory
- win-active-directory-ldap-bo(45585) vdb-entry
- oval:org.mitre.oval:def:6107 signature vdb-entry