CVE-2009-1139
First published: Wed Jun 10 2009(Updated: )
Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2, allows remote attackers to cause a denial of service (memory consumption and service outage) via (1) LDAP or (2) LDAPS requests with unspecified OID filters, aka "Active Directory Memory Leak Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 2000 | =sp4 | |
| Microsoft Windows Server | =sp1 | |
| Microsoft Windows Server | =sp2 | |
| Microsoft Adam | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server | =sp1 | |
| Microsoft Windows XP | ||
| Microsoft Windows XP | =sp2 | |
| Microsoft Windows XP | =sp2 | |
| Microsoft Windows XP | =sp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securitytracker.com/id?1022349
- http://osvdb.org/54938
- http://www.securityfocus.com/bid/35225
- http://secunia.com/advisories/35355
- http://support.avaya.com/elmodocs2/security/ASA-2009-214.htm
- http://www.vupen.com/english/advisories/2009/1537
- http://www.us-cert.gov/cas/techalerts/TA09-160A.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6253
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-018
Frequently Asked Questions
What is the severity of CVE-2009-1139?
CVE-2009-1139 is considered a medium severity vulnerability due to its potential to cause denial of service.
How does CVE-2009-1139 affect systems?
CVE-2009-1139 allows remote attackers to exploit a memory leak in the LDAP service, leading to memory consumption and potential service outages.
Which software versions are vulnerable to CVE-2009-1139?
CVE-2009-1139 impacts Microsoft Windows 2000 SP4, Windows Server 2003 SP1 and SP2, and Active Directory Application Mode on specific Windows XP versions.
What mitigation strategies can be used for CVE-2009-1139?
To mitigate CVE-2009-1139, it is recommended to apply the latest security patches and updates provided by Microsoft.
Can CVE-2009-1139 be exploited remotely?
Yes, CVE-2009-1139 can be exploited remotely, allowing attackers to trigger the memory leak via LDAP requests.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/softwarecombine
- vendor/microsoft
- canonical/microsoft windows 2000
- version/microsoft windows 2000/sp4
- canonical/microsoft windows server
- version/microsoft windows server/sp1
- version/microsoft windows server/sp2
- canonical/microsoft adam
- canonical/microsoft windows xp
- version/microsoft windows xp/sp2
- version/microsoft windows xp/sp3