NVD

Id
3895  
Name
CVE-2008-4037  
Description
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-11-12  
Modified Date
2012-10-30  
Seq
2008-4037  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
24587 3895 CVE-2008-4037 HPSBST02386  View
24588 3895 CVE-2008-4037 oval:org.mitre.oval:def:6012  View
24589 3895 CVE-2008-4037 1021163  View
24590 3895 CVE-2008-4037 MS08-068  View
24591 3895 CVE-2008-4037 7125  View
24592 3895 CVE-2008-4037 http://www.networkworld.com/news/2008/111208-microsoft-seven-year-security-patch.html  View
24593 3895 CVE-2008-4037 7385  View
24594 3895 CVE-2008-4037 http://www.securityfocus.com/data/vulnerabilities/exploits/backrush.patch  View
24595 3895 CVE-2008-4037 http://www.securityfocus.com/data/vulnerabilities/exploits/backrush.patch.README  View
24596 3895 CVE-2008-4037 TA08-316A  View
24597 3895 CVE-2008-4037 http://www.veracode.com/blog/2008/11/microsoft-fixes-8-year-old-design-flaw-in-smb/  View
24598 3895 CVE-2008-4037 ADV-2008-3110  View
24599 3895 CVE-2008-4037 http://www.xfocus.net/articles/200305/smbrelay.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46630 JVNDB-2008-001940 Microsoft Windows における NTLM 認証に関する SMB サーバから任意のコードを実行される脆弱性 Microsoft Windows には、クライアントユーザの NTLM 認証をリプレイすることにより、SMB サーバからクライアントマシン上で任意のコードを実行される脆弱性が存在します。 CVE-2008-4037 34150 CVE-2008-4037 3895 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001940.html 2008-11-11 2008-12-09 View