Home / bulletins

MS08-060 – Critical: Vulnerability in Active Directory Could Allow Remote Code Execution (957280) - Version:1.1

Posted on 15 October 2008

Critical

Severity Rating: Critical - Revision Note: V1.1 (October 15, 2008): Updated the Non-Affected Software table.Summary: This security update resolves a privately reported vulnerability in implementations of Active Directory on Microsoft Windows 2000 Server. The vulnerability could allow remote code execution if an attacker gains access to an affected network. This vulnerability only affects Microsoft Windows 2000 servers configured to be domain controllers. If a Microsoft Windows 2000 server has not been promoted to a domain controller, it will not be listening to Lightweight Directory Access Protocol (LDAP) or LDAP over SSL (LDAPS) queries, and will not be exposed to this vulnerability.

Link

Other versions

• MS08-060 - Version: 1.0
• MS08-060 - Version: 1.1

 

TOP