CVE

Id
26385  
CVE No.
CVE-2007-3028  
Status
Candidate  
Description
The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4 does not properly check "the number of convertible attributes", which allows remote attackers to cause a denial of service (service unavailability) via a crafted LDAP request, related to "client sent LDAP request logic," aka "Windows Active Directory Denial of Service Vulnerability". NOTE: this is probably a different issue than CVE-2007-0040.  
Phase
Assigned (20070605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
267244 26385 CVE-2007-3028 HP:SSRT071446  View
267245 26385 CVE-2007-3028 URL:http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html  View
267246 26385 CVE-2007-3028 MS:MS07-039  View
267247 26385 CVE-2007-3028 URL:http://www.microsoft.com/technet/security/Bulletin/ms07-039.mspx  View
267248 26385 CVE-2007-3028 CERT:TA07-191A  View
267249 26385 CVE-2007-3028 URL:http://www.us-cert.gov/cas/techalerts/TA07-191A.html  View
267250 26385 CVE-2007-3028 CERT-VN:VU#348953  View
267251 26385 CVE-2007-3028 URL:http://www.kb.cert.org/vuls/id/348953  View
267252 26385 CVE-2007-3028 BID:24796  View
267253 26385 CVE-2007-3028 URL:http://www.securityfocus.com/bid/24796  View
267254 26385 CVE-2007-3028 VUPEN:ADV-2007-2481  View
267255 26385 CVE-2007-3028 URL:http://www.vupen.com/english/advisories/2007/2481  View
267256 26385 CVE-2007-3028 OVAL:oval:org.mitre.oval:def:1856  View
267257 26385 CVE-2007-3028 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1856  View
267258 26385 CVE-2007-3028 SECTRACK:1018355  View
267259 26385 CVE-2007-3028 URL:http://www.securitytracker.com/id?1018355  View
267260 26385 CVE-2007-3028 SECUNIA:26002  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51833 JVNDB-2007-000496 Microsoft Excel のワークスペース検証処理におけるメモリ破壊の脆弱性 Microsoft Excel にはワークスペースの指定に関連する処理に不備が存在するために、メモリ領域が破壊される問題が存在します。 CVE-2007-3030 26385 7.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000496.html  View