CVE-2008-1445

Description

Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of service (system hang or reboot) via a crafted LDAP request.

Risk Information

Base Score

6.7

MODERATE

Vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS Score

Exploitation Probability

57.92

Associated Vulnerability

Vulnerability	OS Platform
Security Update for Windows 2000 (KB949014)	Windows
Security Update for Windows XP (KB949269) x86 based systems	Windows
Security Update for Windows XP (KB949269) x86 based systems for SP3	Windows
Security Update for Windows Server 2003 (KB949014) x86 based systems	Windows
Security Update for Windows Server 2003 (KB949014) x86 based systems for SP2	Windows
Security Update for Windows Server 2003 (KB949269) x86 based systems	Windows
Security Update for Windows Server 2003 (KB949269) x86 based systems for SP2	Windows
Security Update for Windows XP x64 Edition (KB949269)	Windows
Security Update for Windows Server 2003 x64 Edition (KB949014)	Windows
Security Update for Windows Server 2003 x64 Edition (KB949269)	Windows
Security Update for Windows Server 2003 x64 Edition (KB949269) for SP2	Windows
Security Update for Windows Server 2003 x64 Edition (KB949014)	Windows
Security Update for Windows Server 2008 (KB949014)	Windows
Security Update for Windows Server 2008 x64 Edition (KB949014)	Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-5964	Security Update for Windows Server 2003 (KB949014)
PATCH-5966	Security Update for Windows Server 2003 (KB949269)
PATCH-5967	Security Update for Windows XP x64 Edition (KB949269)
PATCH-5970	Security Update for Windows Server 2003 x64 Edition (KB949269)
PATCH-5971	Security Update for Windows Server 2003 x64 Edition (KB949014)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234