CVE-2008-5112

NONE

The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitte

게시됨: 11/17/2008업데이트됨: 4/9/2025
NVD에서 보기MITRE에서 보기

설명

The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitted to login, which allows remote attackers to enumerate valid usernames via a series of LDAP bind requests, as demonstrated by ldapuserenum.

AI 분석AI 기반

영향받는 제품

microsoftwindows
server_2003
microsoftwindows
server_2003
microsoftwindows_2000
-

사용 가능한 익스플로잇 (1)

참조