=====================================================================

                           CERT-Renater

               Note d'Information No. 2013/VULN393
_____________________________________________________________________

DATE                : 11/09/2013

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Windows version Vista, Server 2008, 7, 8,

               Server 2012 running Microsoft Active Directory,
               Microsoft Active Directory Lightweight Directory Service.

======================================================================
KB2853587
http://technet.microsoft.com/en-us/security/bulletin/ms13-079
______________________________________________________________________

Microsoft Security Bulletin MS13-079 - Important Vulnerability in Active
Directory Could Allow Denial of Service (2853587)

Published Date: September 10, 2013

Version: 1.0


General Information

Executive Summary

This security update resolves a privately reported vulnerability in
Active Directory. The vulnerability could allow denial of service if an
attacker sends a specially crafted query to the Lightweight Directory
Access Protocol (LDAP) service.

This security update is rated Important for Active Directory
Lightweight Directory Service (AD LDS) and Active Directory Services
where affected on Windows Vista, Windows Server 2008, Windows 7,
Windows Server 2008 R2, Windows 8, and Windows Server 2012.

The security update addresses the vulnerability by correcting how the
LDAP directory service handles specially crafted LDAP queries.


Affected Software

Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 8 for 32-bit Systems
Windows 8 for 64-bit Systems
Windows Server 2012
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core
installation)
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core
installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core
installation)
Windows Server 2012 (Server Core installation)


Vulnerability Information

Remote Anonymous DoS Vulnerability - CVE-2013-3868

A denial of service vulnerability exists in implementations of Active
Directory Services and AD LDS that could cause the LDAP directory
service to stop responding until an administrator restarts the service.
The vulnerability is caused when the LDAP directory service fails to
handle a specially crafted query.


======================================================================

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================