A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people or malicious users to cause a DoS (Denial of Service).

The vulnerability is caused due to an input validation error in the processing of LDAP requests. This can be exploited to cause a vulnerable system to stop responding and automatically restart via a specially crafted LDAP packet sent to the Active Directory Application Mode (ADAM), Active Directory, or AD LDS server.

Successful exploitation requires valid logon credentials on Windows XP Professional, Windows Server 2003, and Windows Server 2008.

NOTE: Active Directory Application Mode (ADAM) is not enabled upon installation.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Alex Matthews and John Guzik of Securify.

Original Advisory
MS08-035 (KB953235):
http://www.microsoft.com/technet/security/Bulletin/MS08-035.mspx

Deep Links
Links available to Secunia VIM customers