NVD

Id
48435  
Name
CVE-2009-1138  
Description
The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows remote attackers to execute arbitrary code via a request that uses hexadecimal encoding, whose associated memory is not released, related to a "DN AttributeValue," aka "Active Directory Invalid Free Vulnerability." NOTE: this issue is probably a memory leak.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-06-10  
Modified Date
2010-08-21  
Seq
2009-1138  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
243887 48435 CVE-2009-1138 20090611 Microsoft Active Directory Hexdecimal DN AttributeValue Invalid Free Vulnerability  View
243888 48435 CVE-2009-1138 oval:org.mitre.oval:def:6180  View
243889 48435 CVE-2009-1138 http://support.avaya.com/elmodocs2/security/ASA-2009-214.htm  View
243890 48435 CVE-2009-1138 MS09-018  View
243891 48435 CVE-2009-1138 35226  View
243892 48435 CVE-2009-1138 1022349  View
243893 48435 CVE-2009-1138 TA09-160A  View
243894 48435 CVE-2009-1138 ADV-2009-1537  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40772 JVNDB-2009-001778 Active Directory の LDAP サービスにおける任意のコードを実行される脆弱性 Microsoft Windows 上で稼働している Active Directory の LDAP サービスには、LDAP および LDAPS リクエストを処理する際にメモリを正しく解放しないため、任意のコードを実行される脆弱性が存在します。 CVE-2009-1138 38569 CVE-2009-1138 48435 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001778.html 2009-06-09 2009-07-21 View