CVE-2008-4037 Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by re...
HighCVSS 9.3
EPSS 59.1%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows | = server_2003-sp1 | No fix listed |
| Microsoft windows | = server_2003-sp2 | No fix listed |
| Microsoft windows | = server_2003-unknown | No fix listed |
| Microsoft windows | = xp-sp2 | No fix listed |
| Microsoft windows | = xp-sp3 | No fix listed |
| Microsoft windows | = xp-unknown | No fix listed |
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows server 2008 | All versions | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
References
- SSRT080164 vendor-advisory
- 49736 vdb-entry
- 32633 third-party-advisory vendor-advisory
- 1021163 vdb-entry
- www.networkworld.com
- 7385 exploit patch vdb-entry
- www.securityfocus.com exploit
- www.securityfocus.com exploit
- TA08-316A third-party-advisory us-government-resource
- www.veracode.com
- ADV-2008-3110 vdb-entry vendor-advisory
- www.xfocus.net
- MS08-068 vendor-advisory
- oval:org.mitre.oval:def:6012 signature vdb-entry
- 7125 exploit