Vulnerability in N/a

CVE-2008-4023

Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka "Active Directory Overflow Vulnerabili…

EPSS: 0.602 (98.3th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

oval:org.mitre.oval:def:6107 (x_refsource_OVAL, signature, vdb-entry)
SSRT080143 (x_refsource_HP, vendor-advisory)
31609 (vdb-entry, x_refsource_BID)
1021042 (vdb-entry, x_refsource_SECTRACK)
win-active-directory-ldap-bo(45585) (vdb-entry, x_refsource_XF)
ADV-2008-2811 (vdb-entry, x_refsource_VUPEN)
MS08-060 (x_refsource_MS, vendor-advisory)
TA08-288A (x_refsource_CERT, third-party-advisory)
32242 (x_refsource_SECUNIA, third-party-advisory)