Signature Detail
Short Name |
LDAP:OVERFLOW:MS-DIR-LEAK-MC |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
LDAP |
Keywords |
Microsoft Windows 2000 Active Directory LDAP Parsing Memory Corruption |
Release Date |
2011/12/21 |
Update Number |
2051 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
LDAP: Microsoft Windows 2000 Active Directory LDAP Parsing Memory Corruption
This signature detects attempts to exploit a known vulnerability against Windows 2000 domain controllers. A successful attack can result in a server denial of service or arbitrary code execution.
Extended Description
Microsoft Active Directory is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Successful exploits will completely compromise the affected computer. Failed attacks will cause denial-of-service conditions.
Affected Products
- Avaya Messaging Application Server MM 1.1
- Avaya Messaging Application Server MM 2.0
- Avaya Messaging Application Server MM 3.0
- Avaya Messaging Application Server MM 3.1
- Avaya Messaging Application Server
- Microsoft Windows 2000 Advanced Server SP4
- Microsoft Windows 2000 Datacenter Server SP4
- Microsoft Windows 2000 Server SP4
- Nortel Networks Self-Service - CCSS7
- Nortel Networks Self-Service CCXML
- Nortel Networks Self-Service Media Processing Server
- Nortel Networks Self-Service MPS 100
- Nortel Networks Self-Service MPS 1000
- Nortel Networks Self-Service MPS 500
- Nortel Networks Self-Service Peri Application
- Nortel Networks Self-Service Peri Workstation
- Nortel Networks Self-Service Speech Server
- Nortel Networks Self Service VoiceXML
- Nortel Networks Self-Service WVADS
References
- BugTraq: 35226
- CVE: CVE-2009-1138