Unscored severity · published Nov 12, 2008
CVE-2008-4037
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a…
–
CVSS
59.1%
EPSS
No
On KEV
Description
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.
Exploitation
Is it being used?
Exploit prediction (EPSS)59.1% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Windows · Microsoft
server_2003; server_2003; server_2003; server_2003; server_2003; server_2003; +4 more · source: NVD
W2
Windows 2000 · Microsoft
All versions, or not specified · source: NVD
WS
Windows Server 2008 · Microsoft
All versions, or not specified · source: NVD
WV
Windows Vista · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4037
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4037
marc.info
http://marc.info/?l=bugtraq&m=122703006921213&w=2
osvdb.org
http://osvdb.org/49736
Vendor Advisory
http://secunia.com/advisories/32633
securitytracker.com
http://securitytracker.com/id?1021163
www.networkworld.com
http://www.networkworld.com/news/2008/111208-microsoft-seven-year-security-patch.html
Exploit
http://www.securityfocus.com/bid/7385
More from Windows
10.0
CVE-2020-1350
Microsoft Windows DNS Server Remote Code Execution Vulnerability
9.8
CVE-2025-59287
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
9.8
CVE-2019-0708
Microsoft Remote Desktop Services Remote Code Execution Vulnerability
9.8
CVE-2017-8543
Microsoft Windows Search Remote Code Execution Vulnerability
9.8
CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability