Home  >  CVE-2003-0507
CVE Details for CVE: CVE-2003-0507
Summary
Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service (reboot) and possibly execute arbitrary code via an LDAP version 3 search request with a large number of (1) "AND," (2) "OR," and possibly other statements, which causes LSASS.EXE to crash.
Timestamps
Last major update 18-10-2016 - 02:34
Published 07-08-2003 - 04:00
Last modified 18-10-2016 - 02:34
References
Vulnerable Configurations
  • cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
7.5
Impact
6.4
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 7930
bugtraq 20030702 CORE-2003-0305-03: Active Directory Stack Overflow
cert-vn VU#594108
mskb Q319709
secunia 9171