CVE-2008-4037 EXPLOIT
9.3
HIGH · CVSS 2.0 · EPSS 59.1% (pctl 99)
Patch early
A public exploit exists.
Description
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.
Scoring
| CVSS | 9.3 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
| EPSS | 59.14% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-287 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-11-12 |
| Last modified | 2026-06-16 |
Affected (4)
| Vendor | Product |
|---|---|
| microsoft | windows |
| microsoft | windows 2000 |
| microsoft | windows server 2008 |
| microsoft | windows vista |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Windows - SMB Relay Code Execution (MS08-068) (Metasploit) | 2010-09-21 |
| exploit-db | Microsoft Windows - SmbRelay3 NTLM Replay (MS08-068) | 2008-11-14 |
| exploit-db | Microsoft Windows 2000/XP - SMB Authentication Remote Overflow | 2003-04-25 |
References
- http://marc.info/?l=bugtraq&m=122703006921213&w=2
- http://osvdb.org/49736
- http://secunia.com/advisories/32633
- http://securitytracker.com/id?1021163
- http://www.networkworld.com/news/2008/111208-microsoft-seven-year-security-patch.html
- http://www.securityfocus.com/bid/7385
- http://www.securityfocus.com/data/vulnerabilities/exploits/backrush.patch
- http://www.securityfocus.com/data/vulnerabilities/exploits/backrush.patch.README
- http://www.us-cert.gov/cas/techalerts/TA08-316A.html
- http://www.veracode.com/blog/2008/11/microsoft-fixes-8-year-old-design-flaw-in-smb/
- http://www.vupen.com/english/advisories/2008/3110
- http://www.xfocus.net/articles/200305/smbrelay.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-068
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6012
- https://www.exploit-db.com/exploits/7125
- http://marc.info/?l=bugtraq&m=122703006921213&w=2
- http://osvdb.org/49736
- http://secunia.com/advisories/32633
- http://securitytracker.com/id?1021163
- http://www.networkworld.com/news/2008/111208-microsoft-seven-year-security-patch.html
→ the Explorer · watch your stack · NVD