CVE-2008-1445 Denial of service in n/a
Remote authenticated users can cause a system hang or reboot in Windows Active Directory via a crafted LDAP request.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2008-1445?
CVE-2008-1445 is a high-severity denial of service vulnerability in Microsoft Windows 2003 Server, published on 12 Jun 2008. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of service (system hang or reboot) via a crafted LDAP request.
Weakness: CWE-20
Which versions are affected by CVE-2008-1445?
It affects 3 products.
Products include Microsoft Windows-Nt, Microsoft Windows 2003 Server, Microsoft Windows Xp.
How do I fix CVE-2008-1445?
No fix has been published for CVE-2008-1445 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2008-1445 being exploited?
There is no known exploitation of CVE-2008-1445 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Windows 2003 Server
Sources
Also known as GHSA-f8q3-q4w9-8vjm.