Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-0040
HistoryJul 10, 2007 - 10:30 p.m.

CVE-2007-0040

2007-07-1022:30:00
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.819 High

EPSS

Percentile

98.4%

JSON

The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2, and Server 2003 for Itanium-based Systems SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted LDAP request with an unspecified number of “convertible attributes.”

Affected configurations

NVD
Node
microsoftwindows_2000sp4
OR
microsoftwindows_2003_serverx64
OR
microsoftwindows_2003_serversp1
OR
microsoftwindows_2003_serversp1itanium
OR
microsoftwindows_2003_serversp2
OR
microsoftwindows_2003_serversp2x64

Related

prion 2
checkpoint_advisories 2
cert 1
cvelist 2
cve 2
nessus 2
nvd 1
securityvulns 2
prion
prion
Code injection
2007-07-10 22:30:00
Design/Logic Flaw
2007-07-10 22:30:00
checkpoint_advisories
checkpoint_advisories
Microsoft Active Directory LDAP Modify Request Buffer Overflow (MS07-039; CVE-2007-0040)
2007-07-11 00:00:00
Microsoft Active Directory LDAP Modify Request Buffer Overflow (MS07-039) - Ver2 (CVE-2007-0040)
2014-12-28 00:00:00
cert
cert
Microsoft Windows Active Directory fails to properly validate LDAP requests
2007-07-10 00:00:00
cvelist
cvelist
CVE-2007-0040
2007-07-10 22:00:00
CVE-2007-3028
2007-07-10 22:00:00
cve
cve
CVE-2007-0040
2007-07-10 22:30:00
CVE-2007-3028
2007-07-10 22:30:00
nessus
nessus
MS07-039: Vulnerability in Windows Active Directory Could Allow Remote Code Execution (926122) (uncredentialed check)
2007-07-11 00:00:00
MS07-039: Microsoft Windows Active Directory LDAP Service Remote Code Execution (926122)
2007-07-10 00:00:00
nvd
nvd
CVE-2007-3028
2007-07-10 22:30:00
securityvulns
securityvulns
Microsoft Windows Active Directory array overflow
2007-07-11 00:00:00
Microsoft Security Bulletin MS07-039 - Critical Vulnerability in Windows Active Directory Could Allow Remote Code Execution (926122)
2007-07-10 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.819 High

EPSS

Percentile

98.4%

JSON
Related for NVD:CVE-2007-0040
prion2checkpoint_advisories2cert1cvelist2cve2nessus2nvd1securityvulns2