Description
The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2, and Server 2003 for Itanium-based Systems SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted LDAP request with an unspecified number of "convertible attributes."
References
- SSRT071446 vendor-advisory
- 24800 vdb-entry
- oval:org.mitre.oval:def:2012 vdb-entry signature
- 20070710 Microsoft Windows Active Directory Remote Code Execution third-party-advisory
- 1018355 vdb-entry
- 26002 third-party-advisory
- 35960 vdb-entry
- VU#487905 third-party-advisory
- ADV-2007-2481 vdb-entry
- TA07-191A third-party-advisory
- MS07-039 vendor-advisory