Windows Active Directory Bug in Processing LDAP Convertible Attributes Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1018355 |
|
SecurityTracker URL: http://securitytracker.com/id/1018355
|
|
CVE Reference:
CVE-2007-0040, CVE-2007-3028
(Links to External Site)
|
Date: Jul 10 2007
|
Impact:
Denial of service via network, Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
|
Description:
A vulnerability was reported in Windows Active Directory. A remote user can execute arbitrary code on the target system or cause denial of service conditions.
The system does not properly validate certain convertible attributes in an LDAP request. A remote user can send a specially crafted LDAP request to execute arbitrary code on the target system or cause the target service to crash. The code will run with the privileges of the target service.
Microsoft credits Peter Winter-Smith of NGSSoftware and Neel Mehta of IBM Internet Security Systems x-Force with reporting this vulnerability.
|
Impact:
A remote user can execute arbitrary code on the target system.
A remote user can cause the target service to crash.
|
Solution:
The vendor has issued the following fixes:
Microsoft Windows 2000 Server Service Pack 4:
http://www.microsoft.com/downloads/details.aspx?FamilyId=812e62c5-6e19-4b3b-8a10-861b871e1b41
Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?FamilyId=28e84603-8159-4429-aaff-a1020531e84f
Windows Server 2003 x64 Edition and Windows Server 2003 x64 Edition Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?FamilyId=107902f9-be94-457f-a936-519efbd64779
Windows Server 2003 with SP1 for Itanium-based Systems and Windows Server 2003 with SP2 for Itanium-based Systems:
http://www.microsoft.com/downloads/details.aspx?FamilyId=e5e5b425-fe7d-49d5-973f-f3fd7a1e04eb
A restart is required.
The Microsoft advisory is available at:
http://www.microsoft.com/technet/security/bulletin/ms07-039.mspx
|
Vendor URL: www.microsoft.com/technet/security/bulletin/ms07-039.mspx (Links to External Site)
|
Cause:
Input validation error
|
Underlying OS:
Windows (2000), Windows (2003)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Tue, 10 Jul 2007 14:34:20 -0400
Subject: Microsoft Security Bulletin MS07-039 - Critical: Vulnerability in Windows Active Directory Could Allow Remote Code Execution (926122)
|
http://www.microsoft.com/technet/security/bulletin/ms07-039.mspx
CVE-2007-0040
CVE-2007-3028
|
|
