7.8

CVE-2009-1139

EPSS 39.13%
Veröffentlicht 10.06.2009 18:00:00
Zuletzt bearbeitet 16.06.2026 23:06:35
Erkennungen
Login

Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2, allows remote attackers to cause a denial of service (memory consumption and service outage) via (1) LDAP or (2) LDAPS requests with unspecified OID filters, aka "Active Directory Memory Leak Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Adam

   Microsoft ≫ Windows Xp Edition professional_x64
   Microsoft ≫ Windows Xp Update sp2 Edition professional
   Microsoft ≫ Windows Xp Update sp2 Edition professional_x64
   Microsoft ≫ Windows Xp Version - Update sp3 Edition professional

Microsoft ≫ Windows Server 2003

   Microsoft ≫ Windows Xp Edition professional_x64
   Microsoft ≫ Windows Xp Update sp2 Edition professional
   Microsoft ≫ Windows Xp Update sp2 Edition professional_x64
   Microsoft ≫ Windows Xp Version - Update sp3 Edition professional

Microsoft ≫ Windows Server 2003 Update sp1

   Microsoft ≫ Windows Xp Edition professional_x64
   Microsoft ≫ Windows Xp Update sp2 Edition professional
   Microsoft ≫ Windows Xp Update sp2 Edition professional_x64
   Microsoft ≫ Windows Xp Version - Update sp3 Edition professional

Microsoft ≫ Windows Server 2003 Update sp2

   Microsoft ≫ Windows Xp Edition professional_x64
   Microsoft ≫ Windows Xp Update sp2 Edition professional
   Microsoft ≫ Windows Xp Update sp2 Edition professional_x64
   Microsoft ≫ Windows Xp Version - Update sp3 Edition professional

Microsoft ≫ Windows 2000 Update sp4

Microsoft ≫ Windows Server 2003 Update sp1 Edition itanium

Microsoft ≫ Windows Server 2003 Update sp2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	39.13%	0.984

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.us-cert.gov/cas/techalerts/TA09-160A.html

US Government Resource

http://secunia.com/advisories/35355

http://support.avaya.com/elmodocs2/security/ASA-2009-214.htm

http://www.securitytracker.com/id?1022349

http://www.vupen.com/english/advisories/2009/1537

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-018

http://osvdb.org/54938

http://www.securityfocus.com/bid/35225

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6253

https://nvd.nist.gov/vuln/detail/CVE-2009-1139

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-1139

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-1139

EUVD