Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2; Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2; and Active Directory Lightweight Directory Service (AD LDS) on Windows Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via a malformed (1) LDAP or (2) LDAPS request, aka "LSASS Recursive Stack Overflow Vulnerability."

Threat-Mapped Scoring

Score: 1.5

Priority: P4 - Informational (Low)

• S10 – Denial of Service

EPSS

Score: 0.68083
Percentile: 0.98501

CVSS Scoring

Affected Products

• cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_server_2008:-:gold:itanium:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*

← Back to Home