Title

Microsoft Active Directory Denial of Service Vulnerability (Cat I impact)

Discussion

Microsoft has released a security advisory addressing a denial of service vulnerability in active directory. Microsoft active directory is a Windows component that provides central authentication and authorization services for Windows-based systems. To exploit this vulnerability, an attacker would send a malicious query to the Lightweight Directory Access Protocol (LDAP) service. If successfully exploited, the attacker would cause the LDAP directory service to become unresponsive and cause a denial of service condition.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-40303

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.