Description
The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4 does not properly check "the number of convertible attributes", which allows remote attackers to cause a denial of service (service unavailability) via a crafted LDAP request, related to "client sent LDAP request logic," aka "Windows Active Directory Denial of Service Vulnerability". NOTE: this is probably a different issue than CVE-2007-0040.
References
- SSRT071446 vendor-advisory
- 24796 vdb-entry
- 1018355 vdb-entry
- 26002 third-party-advisory
- ADV-2007-2481 vdb-entry
- TA07-191A third-party-advisory
- VU#348953 third-party-advisory
- MS07-039 vendor-advisory
- oval:org.mitre.oval:def:1856 vdb-entry signature