Microsoft Active Directory Memory Leak Denial of Service (MS09-018; CVE-2009-1139)

Active Directory provides central authentication and authorization services for Windows-based systems. Active Directory Application Mode ADAM is a Lightweight Directory Access Protocol LDAP directory service that runs as a user service. A denial of service vulnerability has been reported in...

Microsoft活动目录服务内存泄漏漏洞(MS09-018)

BUGTRAQ ID: 35225 CVECAN ID: CVE-2009-1139 Microsoft Windows是微软发布的非常流行的操作系统。 LDAP服务在执行包含特定OID过滤器的LDAP或LDAPS请求时没有正确地管理内存。远程攻击者可以通过向Active Directory或ADAM服务器发送特制的LDAP或LDAPS报文触发内存破坏，导致受影响的系统停止接受请求。对于Windows 2000 Server，任何可以访问目标网络的匿名用户均可以向受影响的系统传递特制网络报文来利用此漏洞；在Server...

Microsoft Active Directory LDAP Invalid Free Allocation (MS09-018; CVE-2009-1138)

Active Directory provides central authentication and authorization services for Windows-based systems. Active Directory Application Mode ADAM is a Lightweight Directory Access Protocol LDAP directory service that runs as a user service. A remote code execution vulnerability has been reported in...