Vulnerability Bulletins |
Denegación de servicio en Microsoft Windows Active Directory |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Denegación de Servicio |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Microsoft |
| Affected software |
Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows XP con ADAM Microsoft Windows Server 2003 con ADAM |
Description |
|
|
Se ha descubierto una vulnerabilidad en Microsoft Windows 2000, Windows Server 2003, Windows XP con ADAM (Active Directory Application Mode) y Windows Server 2003 con ADAM. La vulnerabilidad reside en un error de validación de la entrada en Active Directory. Un atacante remoto podría causar una denegación de servicio (cuelgue y reinicio del sistema) mediante una petición LDAP especialmente diseñada. El boletín MS08-003 sustituye al MS07-039. El boletín MS08-035 sustituye al MS08-003. |
|
Solution |
|
|
Actualización de software Microsoft (MS08-003) Windows 2000 Service Pack 4 / patch Windows2000-kb943484-x86-enu Windows XP Service Pack 2 ADAM / patch WindowsXP-KB931374-x86-ENU Windows XP Professional x64 Edition ADAM / KB931374-x64-ENU.exe Windows XP Professional x64 Edition Service Pack 2 ADAM / KB931374-x64-ENU.exe Windows Server 2003 (32-bit) / patch Windowsserver2003-kb943484-x86-enu Windows Server 2003 (Itanium) / WindowsServer2003-kb943484-ia64-enu Windows Server 2003 (x64) / WindowsServer2003.WindowsXP-kb943484-x64-enu Windows Server 2003 (32-bit) ADAM / Windowsserver2003-kb931374-x86-enu Windows Server 2003 (x64) ADAM / WindowsServer2003.WindowsXP-KB931374-x64-enu |
|
Standar resources |
|
| Property | Value |
| CVE | CVE-2008-0088 |
| BID | 27638 |
Other resources |
|
|
Microsoft Security Bulletin (MS08-003) http://www.microsoft.com/technet/security/bulletin/ms08-003.mspx Microsoft Security Bulletin (MS08-035) http://www.microsoft.com/technet/security/bulletin/ms08-035.mspx |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2008-02-13 |
| 1.1 | Aviso emitido por Microsoft (MS08-035). Descripción actualizada. | 2008-06-11 |