CVE-2009-1928: High severity Microsoft Windows 2000 vulnerability
Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2; Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2; and Active Directory Lightweight Directory Service (AD LDS) on Windows Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via a malformed (1) LDAP or (2) LDAPS request, aka "LSASS Recursive Stack Overflow Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1928?
CVE-2009-1928 has a critical severity rating due to potential stack consumption vulnerabilities that can be exploited remotely.
How do I fix CVE-2009-1928?
To fix CVE-2009-1928, apply the appropriate security updates provided by Microsoft for affected versions of Windows.
What systems are affected by CVE-2009-1928?
CVE-2009-1928 affects Microsoft Windows 2000 SP4, Windows Server 2003 SP2, Windows Server 2008, Windows XP SP2 and SP3, and several versions of Active Directory services.
What are the potential exploits for CVE-2009-1928?
Exploiting CVE-2009-1928 could allow an attacker to consume resources on the LDAP service, leading to denial of service conditions.
Is there a workaround for CVE-2009-1928?
Currently, the best solution for CVE-2009-1928 is to apply the security patches, as there are no specific workarounds that fully mitigate the vulnerability.