Unscored CVE-2008-4023 EUVD-2008-4008GHSA-qx5x-9xp3-x3vm

Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote a…

Published Oct 15, 2008 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka "Active Directory Overflow Vulnerability."

References

oval:org.mitre.oval:def:6107 vdb-entry signature
SSRT080143 vendor-advisory
31609 vdb-entry
1021042 vdb-entry
win-active-directory-ldap-bo(45585) vdb-entry
ADV-2008-2811 vdb-entry
MS08-060 vendor-advisory
TA08-288A third-party-advisory
32242 third-party-advisory