Secunia

Two vulnerabilities have been reported in Windows Active Directory, which can be exploited by malicious users and malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

1) A boundary error within the handling of the number of convertible attributes in LDAP requests can be exploited to cause a buffer overflow via a specially crafted request.

Successful exploitation causes a DoS and may allow execution of arbitrary code, but requires valid logon credentials on Windows Server 2003.

2) An error exists in the handling of LDAP requests containing the ASN.1 type 0x08. This can be exploited to cause the service to temporarily stop responding by sending a specially crafted LDAP request.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) Neel Mehta, IBM Internet Security Systems X-Force.
2) The vendor credits Peter Winter-Smith, NGSSoftware.

Changelog
Further details available in Customer Area

Original Advisory
MS07-039 (KB926122):
http://www.microsoft.com/technet/security/Bulletin/MS07-039.mspx

IBM ISS X-Force:
http://www.iss.net/threats/267.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area