SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Directory)  >   Microsoft Active Directory Vendors:   Microsoft
Windows Active Directory Bug in Processing LDAP Convertible Attributes Lets Remote Users Execute Arbitrary Code
SecurityTracker Alert ID:  1018355
SecurityTracker URL:  http://securitytracker.com/id/1018355
CVE Reference:   CVE-2007-0040, CVE-2007-3028   (Links to External Site)
Date:  Jul 10 2007
Impact:   Denial of service via network, Execution of arbitrary code via network, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  

Description:   A vulnerability was reported in Windows Active Directory. A remote user can execute arbitrary code on the target system or cause denial of service conditions.

The system does not properly validate certain convertible attributes in an LDAP request. A remote user can send a specially crafted LDAP request to execute arbitrary code on the target system or cause the target service to crash. The code will run with the privileges of the target service.

Microsoft credits Peter Winter-Smith of NGSSoftware and Neel Mehta of IBM Internet Security Systems x-Force with reporting this vulnerability.

Impact:   A remote user can execute arbitrary code on the target system.

A remote user can cause the target service to crash.

Solution:   The vendor has issued the following fixes:

Microsoft Windows 2000 Server Service Pack 4:

http://www.microsoft.com/downloads/details.aspx?FamilyId=812e62c5-6e19-4b3b-8a10-861b871e1b41

Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2:

http://www.microsoft.com/downloads/details.aspx?FamilyId=28e84603-8159-4429-aaff-a1020531e84f

Windows Server 2003 x64 Edition and Windows Server 2003 x64 Edition Service Pack 2:

http://www.microsoft.com/downloads/details.aspx?FamilyId=107902f9-be94-457f-a936-519efbd64779

Windows Server 2003 with SP1 for Itanium-based Systems and Windows Server 2003 with SP2 for Itanium-based Systems:

http://www.microsoft.com/downloads/details.aspx?FamilyId=e5e5b425-fe7d-49d5-973f-f3fd7a1e04eb

A restart is required.

The Microsoft advisory is available at:

http://www.microsoft.com/technet/security/bulletin/ms07-039.mspx

Vendor URL:  www.microsoft.com/technet/security/bulletin/ms07-039.mspx (Links to External Site)
Cause:   Input validation error
Underlying OS:  Windows (2000), Windows (2003)

Message History:   None.


 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2019, SecurityGlobal.net LLC