CVE-2008-4037

CRITICAL 9.3CVE-2008-4037 · Published 12/11/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.

References

marc.info
osvdb.org/49736
secunia.com/advisories/32633 · Vendor Advisory
securitytracker.com/id
networkworld.com/news/2008/111208-microsoft-seven-year-security-patch.html
securityfocus.com/bid/7385 · Exploit
securityfocus.com/data/vulnerabilities/exploits/backrush.patch · Exploit
securityfocus.com/data/vulnerabilities/exploits/backrush.patch.README · Exploit
us-cert.gov/cas/techalerts/TA08-316A.html · US Government Resource
veracode.com/blog/2008/11/microsoft-fixes-8-year-old-design-flaw-in-smb
vupen.com/english/advisories/2008/3110 · Vendor Advisory
xfocus.net/articles/200305/smbrelay.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-068
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6012
exploit-db.com/exploits/7125

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free