CVE-2008-5112: Infoleak

Published Nov 17, 2008

Updated

The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitted to login, which allows remote attackers to enumerate valid usernames via a series of LDAP bind requests, as demonstrated by ldapuserenum.

Affected Software

3 affected components

Microsoft Windows 2000=sp4

Microsoft Windows=server_2003-sp2

Microsoft Windows=server_2003-sp1

Event History

Nov 17, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-5112?

CVE-2008-5112 is considered a medium severity vulnerability due to its potential for username enumeration.

How do I fix CVE-2008-5112?

To mitigate CVE-2008-5112, ensure the LDAP server is properly configured to prohibit unauthorized binding attempts.

What software is affected by CVE-2008-5112?

CVE-2008-5112 affects Microsoft Windows 2000 SP4 and Windows Server 2003 SP1 and SP2.

What does CVE-2008-5112 allow attackers to do?

CVE-2008-5112 allows remote attackers to enumerate valid usernames on the affected LDAP server.

Is CVE-2008-5112 still a concern for modern systems?

While CVE-2008-5112 primarily affects legacy systems, it can be a concern if those systems are still in use or accessible.