RE: Securify bulletin: Microsoft Active Directory Denial-of-service

To: <bugtraq@xxxxxxxxxxxxxxxxx>, <full-disclosure@xxxxxxxxxxxxxxxxx>
Subject: RE: Securify bulletin: Microsoft Active Directory Denial-of-service
From: "Michael Wojcik" <Michael.Wojcik@xxxxxxxxxxxxxx>
Date: Fri, 13 Jun 2008 11:31:30 -0700
Cc: "Securify Bulletins" <bulletins@xxxxxxxxxxxx>
In-reply-to: <539FB1A55F952943B84A107ED36936B80138536B@xxxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <539FB1A55F952943B84A107ED36936B80138536B@xxxxxxxxxxxxxxxxxx>
Thread-index: AcjNdLqwLmK8AQtNQ0Spo70stCqxpgAC9Pig
Thread-topic: Securify bulletin: Microsoft Active Directory Denial-of-service

> From: Securify Bulletins [mailto:bulletins@xxxxxxxxxxxx] 
> Sent: Friday, 13 June, 2008 12:44
> To: bugtraq@xxxxxxxxxxxxxxxxx; full-disclosure@xxxxxxxxxxxxxxxxx
>
> IV. WORKAROUNDS:
> 
>   Block TCP ports 389 and 3268 to your Active Directory 
> server from untrusted sources.

AD may also be listening on 636 for LDAP-over-SSL.

-- 
Michael Wojcik
Principal Software Systems Developer, Micro Focus

References:
- Securify bulletin: Microsoft Active Directory Denial-of-service
  - From: Securify Bulletins

Prev by Date: RE: AS/400 Vulnerabilities
Next by Date: Technical Details of Security Issues Regarding Safari for Windows
Previous by thread: Securify bulletin: Microsoft Active Directory Denial-of-service
Next by thread: [USN-612-9] openssl-blacklist update
Index(es):
- Date
- Thread