CVE-2008-4250

Description

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."

CVSS Metrics

• v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
• v2.0•HIGH•Score: 10AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 93.48%• Percentile: 100%

Techniques & Countermeasures

• CWE-94•Improper Control of Generation of Code ('Code Injection')

  The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

• CWE-119•Improper Restriction of Operations within the Bounds of a Memory Buffer

  The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected Systems

• microsoft•windows_2000

  na

• microsoft•windows_server_2003

  na

• microsoft•windows_server_2008

  na

• microsoft•windows_vista

  na

• microsoft•windows_xp

  na

References (19)

• http://marc.info/?l=bugtraq&m=122703006921213&w=2
• http://secunia.com/advisories/32326
• http://www.kb.cert.org/vuls/id/827267
• http://www.securitytracker.com/id?1021091
• https://www.exploit-db.com/exploits/7132
• https://www.exploit-db.com/exploits/6841
• http://www.securityfocus.com/bid/31874
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067
• http://blogs.securiteam.com/index.php/archives/1150
• https://www.exploit-db.com/exploits/6824
• http://www.vupen.com/english/advisories/2008/2902
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46040
• http://www.securityfocus.com/archive/1/497808/100/0/threaded
• http://www.us-cert.gov/cas/techalerts/TA08-297A.html
• https://www.exploit-db.com/exploits/7104
• http://www.us-cert.gov/cas/techalerts/TA09-088A.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6093
• http://www.securityfocus.com/archive/1/497816/100/0/threaded
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-4250