Home / bulletins

MS09-018 - Critical: Vulnerabilities in Active Directory Could Allow Remote Code Execution (971055) - Version:1.0

Posted on 15 June 2009

There is an newer version: MS09-018 - Version: ion:1

Critical

Severity Rating: Critical - Revision Note: Bulletin published.Summary: This security update resolves two privately reported vulnerabilities in implementations of Active Directory on Microsoft Windows 2000 Server and Windows Server 2003, and Active Directory Application Mode (ADAM) when installed on Windows XP Professional and Windows Server 2003. The more severe vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could take complete control of an affected system remotely. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Firewall best practices and standard default firewall configurations can help protect networks from attacks that originate outside the enterprise perimeter. Best practices recommend that systems that are connected to the Internet have a minimal number of ports exposed.

Link

Other versions

• MS09-018 - Version: 1.0
• MS09-018 - Version: 1.1
• MS09-018 - Version: ion:1

 

TOP