CVE-2008-1445

2008-06-1202:32:00

CWE-20

microsoft

web.nvd.nist.gov

active directory

denial of service

ldap

vulnerability

microsoft windows

cve-2008-1445

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

Confidence

High

EPSS

0.933

Percentile

99.1%

JSON

Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of service (system hang or reboot) via a crafted LDAP request.

Affected configurations

Nvd

Node

microsoftwindows-ntMatch2008x32

microsoftwindows-ntMatch2008x64

microsoftwindows-ntMatchxpsp3pro

microsoftwindows_2003_serverx64

microsoftwindows_2003_serversp1

microsoftwindows_2003_serversp1itanium

microsoftwindows_2003_serversp2

microsoftwindows_2003_serversp2itanium

microsoftwindows_2003_serversp2x64

microsoftwindows_xpsp2x64

VendorProductVersionCPE
microsoftwindows-nt2008cpe:2.3:o:microsoft:windows-nt:2008:*:x32:*:*:*:*:*
microsoftwindows-nt2008cpe:2.3:o:microsoft:windows-nt:2008:*:x64:*:*:*:*:*
microsoftwindows-ntxpcpe:2.3:o:microsoft:windows-nt:xp:sp3:pro:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows-nt	2008	cpe:2.3:o:microsoft:windows-nt:2008::x32:::::
microsoft	windows-nt	2008	cpe:2.3:o:microsoft:windows-nt:2008::x64:::::
microsoft	windows-nt	xp	cpe:2.3:o:microsoft:windows-nt:xp:sp3:pro:::::*
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server:::x64:::::*
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::sp1::::::*
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::sp1:itanium:::::
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::sp2::::::*
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::sp2:itanium:::::
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::sp2:x64:::::
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::sp2:x64:::::