CVE-2008-4023: Microsoft Windows 2000

High severity, CVSS 10.0. EPSS: 39.2% chance of exploitation in the next 30 days.

Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka "Active Directory Overflow Vulnerability."

Affected products

• Microsoft Windows 2000: any version

Published 2008-10-15. Last modified 2026-06-16.