Vulnerability Bulletins |
Denegación de servicio en Active Directory de Microsoft Windows |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Denegación de Servicio |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Microsoft |
| Affected software |
Microsoft Windows 2000 Server Service Pack 4 Microsoft Windows XP Professional Service Pack 2 Microsoft Windows XP Professional Service Pack 3 Microsoft Windows XP Professional x64 Edition Microsoft Windows XP Professional x64 Edition Service Pack 2 Microsoft Windows Server 2003 Service Pack 1 Microsoft Windows Server 2003 Service Pack 2 Microsoft Windows Server 2003 x64 Edition Microsoft Windows Server 2003 x64 Edition Service Pack 2 Microsoft Windows Server 2003 SP1 para Itanium-based Systems Microsoft Windows Server 2003 SP2 para Itanium-based Systems Microsoft Windows Server 2008 para 32-bit Systems Microsoft Windows Server 2008 para x64-based Systems |
Description |
|
|
Se ha encontrado una vulnerabilidad en Active Directory, Active Directory Application Mode y Active Directory Lightweight Directory Services en Microsoft Windows 2000 Server, Windows Server 2003, Windows Server 2008, y Windows XP Professional. La vulnerabilidad reside en un error en la validación de ciertas peticiones LDAP. Un atacante remoto podría causar una denegación de servicio mediante un paquete LDAP especialmente diseñado. El boletín MS08-035 sustituye al MS08-003. |
|
Solution |
|
|
Actualización de software Microsoft (MS08-035) Active Directory / Microsoft Windows 2000 Server SP4 / patch Windows2000-kb949014-x86-enu Active Directory Application Mode / Microsoft Windows XP Professional SP2 y SP3 / patch Windowsxp-kb949269-x86-enu Active Directory Application Mode / Microsoft Windows XP Professional x64 Edition y x64 Edition SP2 / patch WindowsServer2003.WindowsXP-kb949269-x64-enu Active Directory / Microsoft Windows Server 2003 / patch Windowsserver2003-kb949014-x86-enu Active Directory / Microsoft Windows Server 2003 x64 / patch Windowsserver2003.WindowsXP-KB949014-x64-enu Active Directory / Microsoft Windows Server 2003 Itanium / patch Windowsserver2003-KB949014-ia64-enu Active Directory Application Mode / Microsoft Windows Server 2003 / patch Windowsserver2003-kb949269-x86-enu Active Directory Application Mode / Microsoft Windows Server 2003 x64 / patch Windowsserver2003.WindowsXP-KB949269-x64-enu Active Directory Application Mode / Microsoft Windows Server 2003 Itanium / patch Windowsserver2003-KB949269-ia64-enu Active Directory / Microsoft Windows Server 2008 / patch Windows6.0-KB949014-x86 Active Directory Lightweight Directory Services / Microsoft Windows Server 2008 / patch Windows6.0-KB949014-x86 Active Directory / Microsoft Windows Server 2008 x64 / patch Windows6.0-KB949014-x64 Active Directory Lightweight Directory Services / Microsoft Windows Server 2008 x64 / patch Windows6.0-KB949014-x64 http://www.microsoft.com/downloads |
|
Standar resources |
|
| Property | Value |
| CVE | CVE-2008-1445 |
| BID | 29584 |
Other resources |
|
|
Microsoft Security Bulletin (MS08-035) http://www.microsoft.com/technet/security/bulletin/ms08-035.mspx |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2008-06-11 |