Vulnerability Details : CVE-2008-4037

Exploit prediction scoring system (EPSS) score for CVE-2008-4037

Metasploit modules for CVE-2008-4037

• MS08-068 Microsoft Windows SMB Relay Code Execution

  Disclosure Date : 2001-03-31

  exploit/windows/smb/smb_relay

  This module will relay SMB authentication requests to another host, gaining access to an authenticated SMB session if successful. If the connecting user is an administrator and network logins are allowed to the target machine, this module will execute an arbitrary payload. To exploit this, the target system must try to authenticate to this module. The easiest way to force a SMB authentication attempt is by embedding a UNC path (\SERVER\SHARE) into a web page or email message. When the victim views the web page or email, their system will automatically connect to the server specified in the UNC share (the IP address of the system running this module) and attempt to authenticate. Unfortunately, this module is not able to clean up after itself. The service and payload file listed in the output will need to be manually removed after access has been g

  More information

CVSS scores for CVE-2008-4037

CWE ids for CVE-2008-4037

• CWE-287 Improper Authentication
  When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
  Assigned by: [email protected] (Primary)

References for CVE-2008-4037

Products affected by CVE-2008-4037