CVE-2009-1138: Critical severity microsoft windows 2000 vulnerability
The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows remote attackers to execute arbitrary code via a request that uses hexadecimal encoding, whose associated memory is not released, related to a "DN AttributeValue," aka "Active Directory Invalid Free Vulnerability." NOTE: this issue is probably a memory leak.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1138?
CVE-2009-1138 has a medium severity rating due to the potential for remote code execution.
How do I fix CVE-2009-1138?
To mitigate CVE-2009-1138, it is recommended to apply the latest security updates provided by Microsoft for Windows 2000 SP4.
Who is affected by CVE-2009-1138?
CVE-2009-1138 affects systems running Microsoft Windows 2000 with Service Pack 4.
What type of attacks can be executed with CVE-2009-1138?
Remote attackers can exploit CVE-2009-1138 to execute arbitrary code on the affected systems.
Is CVE-2009-1138 a local or remote vulnerability?
CVE-2009-1138 is a remote vulnerability as it can be exploited from outside the affected system.