LDAP: Active Directory LDAP Denial of Service

This signature detects attempts to exploit a known vulnerability in the Microsoft Windows Active Directory Service. A successful attack can result in a denial-of-service condition.

Extended Description

The LDAP service in Microsoft Active Directory, Active Directory Application Mode (ADAM), Active Directory Lightweight Directory Service (AD LDS), and Active Directory Services allows remote attackers to cause a denial of service (memory consumption and service outage) via a crafted query, aka "Memory Consumption Vulnerability."

Affected Products

Microsoft active_directory

References

CVE: CVE-2013-1282

Short Name
LDAP:ACTIVE-DIR-DOS
Severity
Major
Recommended
False
Recommended Action
Drop
Category
LDAP
Keywords
Active CVE-2013-1282 Denial Directory LDAP Service of
Release Date
10/07/2016
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3761
Port
TCP/389
False Positive
Unknown
Vendors

Microsoft

CVSS Score

5.0

Found a potential security threat?