Two vulnerabilities have been identified in Microsoft Windows Active Directory, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system.
The first issue is caused due to the LDAP service on Windows 2000 incorrectly freeing memory upon handling specially crafted LDAP or LDAPS requests, which could be exploited by remote attackers to execute arbitrary code by sending a specially crafted LDAP or LDAPS packet to a domain controller.
The second vulnerability is caused due to the LDAP service improperly managing memory while executing LDAP or LDAPS requests that contain specific OID filters, which could allow remote attackers to cause a denial of service by sending a specially crafted LDAP or LDAPS packet to the Active Directory or ADAM server.
