Описание
Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service (reboot) and possibly execute arbitrary code via an LDAP version 3 search request with a large number of (1) "AND," (2) "OR," and possibly other statements, which causes LSASS.EXE to crash.
Ссылки
- PatchVendor Advisory
- US Government Resource
- PatchVendor Advisory
- US Government Resource
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*
EPSS
Процентиль: 97%
0.44796
Средний
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service (reboot) and possibly execute arbitrary code via an LDAP version 3 search request with a large number of (1) "AND," (2) "OR," and possibly other statements, which causes LSASS.EXE to crash.
EPSS
Процентиль: 97%
0.44796
Средний
7.5 High
CVSS2
Дефекты
NVD-CWE-Other