Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-0040
HistoryJul 10, 2007 - 10:30 p.m.

CVE-2007-0040

2007-07-1022:30:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
42
ldap service
windows active directory
microsoft
windows 2000
server 2003
cve-2007-0040
nvd

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.819 High

EPSS

Percentile

98.4%

JSON

The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2, and Server 2003 for Itanium-based Systems SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted LDAP request with an unspecified number of “convertible attributes.”

Related

prion 2
checkpoint_advisories 2
cvelist 2
cert 1
securityvulns 2
nessus 2
cve 1
prion
prion
Code injection
2007-07-10 22:30:00
Design/Logic Flaw
2007-07-10 22:30:00
checkpoint_advisories
checkpoint_advisories
Microsoft Active Directory LDAP Modify Request Buffer Overflow (MS07-039; CVE-2007-0040)
2007-07-11 00:00:00
Microsoft Active Directory LDAP Modify Request Buffer Overflow (MS07-039) - Ver2 (CVE-2007-0040)
2014-12-28 00:00:00
cvelist
cvelist
CVE-2007-0040
2007-07-10 22:00:00
CVE-2007-3028
2007-07-10 22:00:00
cert
cert
Microsoft Windows Active Directory fails to properly validate LDAP requests
2007-07-10 00:00:00
securityvulns
securityvulns
Microsoft Windows Active Directory array overflow
2007-07-11 00:00:00
Microsoft Security Bulletin MS07-039 - Critical Vulnerability in Windows Active Directory Could Allow Remote Code Execution (926122)
2007-07-10 00:00:00
nessus
nessus
MS07-039: Vulnerability in Windows Active Directory Could Allow Remote Code Execution (926122) (uncredentialed check)
2007-07-11 00:00:00
MS07-039: Microsoft Windows Active Directory LDAP Service Remote Code Execution (926122)
2007-07-10 00:00:00
cve
cve
CVE-2007-3028
2007-07-10 22:30:00

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.819 High

EPSS

Percentile

98.4%

JSON
Related for CVE-2007-0040
prion2checkpoint_advisories2cvelist2cert1securityvulns2nessus2cve1