Vulnerability Description
The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2, and Server 2003 for Itanium-based Systems SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted LDAP request with an unspecified number of "convertible attributes."
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows 2003 Server | All versions |
References
- http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html
- http://osvdb.org/35960
- http://secunia.com/advisories/26002
- http://www.iss.net/threats/267.html
- http://www.kb.cert.org/vuls/id/487905US Government Resource
- http://www.securityfocus.com/bid/24800
- http://www.securitytracker.com/id?1018355
- http://www.us-cert.gov/cas/techalerts/TA07-191A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2007/2481
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-03
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
- http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html
- http://osvdb.org/35960
- http://secunia.com/advisories/26002
- http://www.iss.net/threats/267.html
FAQ
What is CVE-2007-0040?
CVE-2007-0040 is a vulnerability with a CVSS score of 10.0 (HIGH). The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2, and Server 2003 for Itanium-based Systems SP1 and SP2 allow...
How severe is CVE-2007-0040?
CVE-2007-0040 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-0040?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows 2000, Microsoft Windows 2003 Server.