CVE-2007-0040: Critical severity Microsoft Windows 2003 Server vulnerability

Published Jul 10, 2007

Updated

The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2, and Server 2003 for Itanium-based Systems SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted LDAP request with an unspecified number of "convertible attributes."

Affected Software

6 affected components

Microsoft Windows 2003 Server=sp2

Microsoft Windows 2000=sp4

Microsoft Windows 2003 Server=sp1

Microsoft Windows 2003 Server=sp2

Microsoft Windows 2003 Server

Event History

Jul 10, 2007

CVE Published

10:30 PM

Jul 11, 2007

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0040?

CVE-2007-0040 is a critical vulnerability that allows remote attackers to execute arbitrary code on affected systems.

How do I fix CVE-2007-0040?

To fix CVE-2007-0040, apply the latest security updates and patches provided by Microsoft for affected versions of Windows.

Which versions of Windows are affected by CVE-2007-0040?

CVE-2007-0040 affects Microsoft Windows 2000 Server SP4, Windows Server 2003 SP1 and SP2, and Windows Server 2003 for Itanium-based Systems SP1 and SP2.

What type of attack does CVE-2007-0040 enable?

CVE-2007-0040 enables remote code execution attacks through crafted LDAP requests.

How can I determine if my system is vulnerable to CVE-2007-0040?

You can determine your system's vulnerability to CVE-2007-0040 by checking the version and service pack of your Windows operating system.