Microsoft Windows 2000 ModifyDN Request Denial of Service Vulnerability
BID:8085
Info
Microsoft Windows 2000 ModifyDN Request Denial of Service Vulnerability
| Bugtraq ID: | 8085 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 26 2003 12:00AM |
| Updated: | Jun 26 2003 12:00AM |
| Credit: | This vulnerability was announced by the vendor. |
| Vulnerable: |
Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server |
| Not Vulnerable: |
Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Advanced Server SP4 |
Discussion
Microsoft Windows 2000 ModifyDN Request Denial of Service Vulnerability
A denial of service vulnerability has been reported in Windows 2000. It is possible to cause an infinite loop using the LDP tool when requesting a GUID. This loop may cause Active Directory to become unavailable or potentially cause the system to crash.
Precise details of this vulnerability are not available at this time. This record will be updated when more information becomes available.
This issue was announced with the release of Microsoft Windows 2000 SP4. BID 8045 was sent out to acknowledge the release of this service pack and the announcement of a number of new vulnerabilities. Analysis of these issues is completed and each of the issues is now being assigned its own BID.
A denial of service vulnerability has been reported in Windows 2000. It is possible to cause an infinite loop using the LDP tool when requesting a GUID. This loop may cause Active Directory to become unavailable or potentially cause the system to crash.
Precise details of this vulnerability are not available at this time. This record will be updated when more information becomes available.
This issue was announced with the release of Microsoft Windows 2000 SP4. BID 8045 was sent out to acknowledge the release of this service pack and the announcement of a number of new vulnerabilities. Analysis of these issues is completed and each of the issues is now being assigned its own BID.
Exploit / POC
Microsoft Windows 2000 ModifyDN Request Denial of Service Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
Microsoft Windows 2000 ModifyDN Request Denial of Service Vulnerability
Solution:
This issue was fixed in Windows 2000 Service Pack 4:
Microsoft Windows 2000 Server SP2
Microsoft Windows 2000 Server SP3
Microsoft Windows 2000 Advanced Server SP3
Microsoft Windows 2000 Advanced Server SP1
Microsoft Windows 2000 Server SP1
Microsoft Windows 2000 Advanced Server SP2
Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Server
Solution:
This issue was fixed in Windows 2000 Service Pack 4:
Microsoft Windows 2000 Server SP2
-
Microsoft Windows 2000 SP4
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/defaul t.asp
Microsoft Windows 2000 Server SP3
-
Microsoft Windows 2000 SP4
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/defaul t.asp
Microsoft Windows 2000 Advanced Server SP3
-
Microsoft Windows 2000 SP4
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/defaul t.asp
Microsoft Windows 2000 Advanced Server SP1
-
Microsoft Windows 2000 SP4
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/defaul t.asp
Microsoft Windows 2000 Server SP1
-
Microsoft Windows 2000 SP4
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/defaul t.asp
Microsoft Windows 2000 Advanced Server SP2
-
Microsoft Windows 2000 SP4
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/defaul t.asp
Microsoft Windows 2000 Advanced Server
-
Microsoft Windows 2000 SP4
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/defaul t.asp
Microsoft Windows 2000 Server
-
Microsoft Windows 2000 SP4
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/defaul t.asp
References
Microsoft Windows 2000 ModifyDN Request Denial of Service Vulnerability
References:
References:
- Windows 2000 Service Pack 4 (Microsoft)