CVE-2008-4023 Information

Description

Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests which allows remote attackers to execute arbitrary code via a crafted request aka \Active Directory Overflow Vulnerability.\

Reference

http://marc.info/?l=bugtraq&m=122479227205998&w=2 http://secunia.com/advisories/32242 http://www.securityfocus.com/bid/31609 http://www.securitytracker.com/id?1021042 http://www.us-cert.gov/cas/techalerts/TA08-288A.html http://www.vupen.com/english/advisories/2008/2811 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-060 https://exchange.xforce.ibmcloud.com/vulnerabilities/45585 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A6107