CVE-2008-0088

CWE-20 — Improper Input Validation3 documents3 sources

Severity

6.8MEDIUM

EPSS

69.1%

top 1.36%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Windows 2003 Server

Timeline

PublishedFeb 12

Latest updateMay 1

Description

Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP and Server 2003, allows remote attackers to cause a denial of service (hang and restart) via a crafted LDAP request.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 8.0 | Impact: 6.9

Affected Packages1 packages

▶NVDmicrosoft/windows_2003_serversp1, sp2+1

🔴Vulnerability Details

GHSA

GHSA-qh7w-m5p8-jq3c: Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP an↗2022-05-01

▶

CVEList

CVE-2008-0088: Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP an↗2008-02-12

▶