CVE-2013-3868

Name of the Vulnerable Software and Affected Versions Microsoft Active Directory Lightweight Directory Service (AD LDS) versions on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 Active Directory Services versions on Windows Server 2008 SP2 and R2 SP1 and Server 2012

Description The issue allows remote attackers to cause a denial of service, resulting in an LDAP directory-service outage, via a crafted LDAP query.

Recommendations For Microsoft Active Directory Lightweight Directory Service (AD LDS) on affected versions, apply the recommended patch to resolve the issue. For Active Directory Services on affected versions, apply the recommended patch to resolve the issue. As a temporary workaround, consider restricting access to the LDAP service to minimize the risk of exploitation.