CVE-2008-1445

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.1HIGH
EPSS
57.9%
top 1.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Windows-nt
Timeline
PublishedJun 12
Latest updateMay 1

Description

Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of service (system hang or reboot) via a crafted LDAP request.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages1 packages

▶NVDmicrosoft/windows-nt2008, xp+1

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-f8q3-q4w9-8vjm: Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticat↗2022-05-01
▶
CVEList
CVE-2008-1445: Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticat↗2008-06-12
▶
CVE-2008-1445 (HIGH CVSS 7.1) | Active Directory on Microsoft Windo | cvebase.io