exploitDog

CVE-2013-3868

Опубликовано: 11 сент. 2013

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Microsoft Active Directory Lightweight Directory Service (AD LDS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 and Active Directory Services on Windows Server 2008 SP2 and R2 SP1 and Server 2012 allow remote attackers to cause a denial of service (LDAP directory-service outage) via a crafted LDAP query, aka "Remote Anonymous DoS Vulnerability."

Ссылки

http://www.us-cert.gov/ncas/alerts/TA13-253A
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-079
http://www.us-cert.gov/ncas/alerts/TA13-253A
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-079

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:active_directory_lightweight_directory_service:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:microsoft:active_directory_lightweight_directory_service:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*

cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:microsoft:active_directory_lightweight_directory_service:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*

cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:microsoft:active_directory_lightweight_directory_service:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:a:microsoft:active_directory_lightweight_directory_service:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.39167

Средний

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-vj9r-5x9p-j6m6

github

больше 3 лет назад

Microsoft Active Directory Lightweight Directory Service (AD LDS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 and Active Directory Services on Windows Server 2008 SP2 and R2 SP1 and Server 2012 allow remote attackers to cause a denial of service (LDAP directory-service outage) via a crafted LDAP query, aka "Remote Anonymous DoS Vulnerability."

EPSS

Процентиль: 97%

0.39167

Средний

5 Medium

CVSS2

Дефекты

CWE-20