Oval Definition:	oval:org.mitre.oval:def:5181
Revision Date: 2014-04-07 Version: 51 Title: Windows Active Directory Denial of Service Vulnerability Description: Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP and Server 2003, allows remote attackers to cause a denial of service (hang and restart) via a crafted LDAP request. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-0088 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows XP Product(s): Definition Synopsis Vulnerable Windows 2000 SP4 Microsoft Windows 2000 SP4 or later is installed AND NTDS Service is installed AND ntdsa.dll version is less than 5.0.2195.7147 OR Vulnerable Windows XP SP2 (x86)/(x64) Windows XP SP2 (x86)/(x64) Microsoft Windows XP SP2 or later is installed OR Microsoft Windows XP x64 Edition SP2 is installed AND Check if ADAM service is installed AND adamdsa.dll version is less than 1.1.3790.4188 OR Vulnerable Windows XP x64 SP1 Microsoft Windows XP Professional x64 Edition SP1 is installed AND Check if ADAM service is installed AND adamdsa.dll version is less than 1.1.3790.3043 OR Vulnerable Windows Server 2003 SP1 (x86)/(x64) Windows Server 2003 SP1 (x86)/(x64) Microsoft Windows Server 2003 SP1 (x86) is installed OR Microsoft Windows Server 2003 (x64) is installed AND Vulnerable Active directory or ADAM NTDS Service is installed AND ntdsa.dll version is less than 5.2.3790.3043 Check if ADAM service is installed AND adamdsa.dll version is less than 1.1.3790.3043 OR Vulnerable Windows Server 2003 SP2 (x86)/(x64) Windows Server 2003 SP2 (x86)/(x64) Microsoft Windows Server 2003 SP2 (x86) is installed OR Microsoft Windows Server 2003 SP2 (x64) is installed AND Vulnerable Active Directory or ADAM NTDS Service is installed AND ntdsa.dll version is less than 5.2.3790.4188 Check if ADAM service is installed AND adamdsa.dll version is less than 1.1.3790.4188 OR Windows Server 2003 SP1 ia-64 Microsoft Windows Server 2003 SP1 for Itanium is installed AND NTDS Service is installed AND ntdsa.dll version is less than 5.2.3790.3043 OR Vulnerable Windows Server 2003 SP2 ia-64 Microsoft Windows Server 2003 (ia64) SP2 is installed AND the system is being used as AD - DomainRole is 4 or 5 AND NTDS Service is installed AND ntdsa.dll version is less than 5.2.3790.4188
BACK