Microsoft Windows Active Directory CVE-2013-3868 Denial of Service Vulnerability

Bugtraq ID:	62184
Class:	Design Error
CVE:	CVE-2013-3868
Remote:	Yes
Local:	No
Published:	Sep 10 2013 12:00AM
Updated:	Dec 10 2013 12:57AM
Credit:	Microsoft
Vulnerable:	Microsoft Windows Vista Service Pack 2 0 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server 2008 for x64-based Systems SP2 Microsoft Windows Server 2008 for 32-bit Systems SP2 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 7 for 32-bit Systems SP1 Avaya Aura Conferencing 6.0 Standard Avaya Aura Conferencing 6.0 Standard Avaya Aura Conferencing 6.0 SP1 Standard
Not Vulnerable:

Microsoft Windows Active Directory CVE-2013-3868 Denial of Service Vulnerability

Microsoft Windows is prone to a denial-of-service vulnerability.

Successful exploits may allow the attacker to cause the LDAP service to become non-responsive, resulting in denial-of-service conditions.

Microsoft Windows Active Directory CVE-2013-3868 Denial of Service Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

Microsoft Windows Active Directory CVE-2013-3868 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Windows Active Directory CVE-2013-3868 Denial of Service Vulnerability

References:

• Microsoft Homepage (Microsoft)