CVE-2008-4037

緊急 9.3CVE-2008-4037 · 12/11/2008 公開 · 16/06/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
—	この脆弱性の影響を受ける製品バージョンはまだ掲載されていません。

概要

Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.

参考情報

marc.info
osvdb.org/49736
secunia.com/advisories/32633 · Vendor Advisory
securitytracker.com/id
networkworld.com/news/2008/111208-microsoft-seven-year-security-patch.html
securityfocus.com/bid/7385 · Exploit
securityfocus.com/data/vulnerabilities/exploits/backrush.patch · Exploit
securityfocus.com/data/vulnerabilities/exploits/backrush.patch.README · Exploit
us-cert.gov/cas/techalerts/TA08-316A.html · US Government Resource
veracode.com/blog/2008/11/microsoft-fixes-8-year-old-design-flaw-in-smb
vupen.com/english/advisories/2008/3110 · Vendor Advisory
xfocus.net/articles/200305/smbrelay.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-068
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6012
exploit-db.com/exploits/7125

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン