9.3

CVE-2008-4037

Exploit
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability."  NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows Version server_2003 Update sp1
Microsoft ≫ Windows Version server_2003 Update sp1 Edition itanium
Microsoft ≫ Windows Version server_2003 Update sp2
Microsoft ≫ Windows Version server_2003 Update sp2 Edition itanium
Microsoft ≫ Windows Version server_2003 Update sp2 Edition x64
Microsoft ≫ Windows Version server_2003 Update unknown Edition x64
Microsoft ≫ Windows Version xp Update sp2
Microsoft ≫ Windows Version xp Update sp2 Edition x64
Microsoft ≫ Windows Version xp Update sp3
Microsoft ≫ Windows Version xp Update unknown Edition x64
Microsoft ≫ Windows 2000 Version - Update sp4
Microsoft ≫ Windows Server 2008 Version - Edition itanium
Microsoft ≫ Windows Server 2008 Version - Edition x32
Microsoft ≫ Windows Server 2008 Version - Edition x64
Microsoft ≫ Windows Vista Version -
Microsoft ≫ Windows Vista Version - Edition x64
Microsoft ≫ Windows Vista Version - Update sp1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 59.14% 0.99
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://marc.info/?l=bugtraq&m=122703006921213&w=2
http://www.us-cert.gov/cas/techalerts/TA08-316A.html
US Government Resource
http://osvdb.org/49736
http://secunia.com/advisories/32633
Vendor Advisory
http://securitytracker.com/id?1021163
http://www.networkworld.com/news/2008/111208-microsoft-seven-year-security-patch.html
http://www.securityfocus.com/bid/7385
Patch
Exploit
http://www.securityfocus.com/data/vulnerabilities/exploits/backrush.patch
Exploit
http://www.securityfocus.com/data/vulnerabilities/exploits/backrush.patch.README
Exploit
http://www.veracode.com/blog/2008/11/microsoft-fixes-8-year-old-design-flaw-in-smb/
http://www.vupen.com/english/advisories/2008/3110
Vendor Advisory
http://www.xfocus.net/articles/200305/smbrelay.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-068
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6012
https://www.exploit-db.com/exploits/7125