CVE-2009-1139
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.5 Medium
AI Score
Confidence
High
0.557 Medium
EPSS
Percentile
97.7%
Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2, allows remote attackers to cause a denial of service (memory consumption and service outage) via (1) LDAP or (2) LDAPS requests with unspecified OID filters, aka โActive Directory Memory Leak Vulnerability.โ
Affected configurations
References
osvdb.org/54938
secunia.com/advisories/35355
support.avaya.com/elmodocs2/security/ASA-2009-214.htm
www.securityfocus.com/bid/35225
www.securitytracker.com/id?1022349
www.us-cert.gov/cas/techalerts/TA09-160A.html
www.vupen.com/english/advisories/2009/1537
docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-018
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6253
Related
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.5 Medium
AI Score
Confidence
High
0.557 Medium
EPSS
Percentile
97.7%