CVE-2008-4037
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold...
CVE-2008-4037 is a high vulnerability (CVSS 9.3) in Microsoft Windows, published November 12, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 59.1%, the 99th percentile. No source names a fixed version.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 59.1%EPSS, 99th percentile
- Exploitation
- None known4 public exploits
- Fixed in
- No fix listedNo source names one
Description
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | MS08-068 Microsoft Windows SMB Relay Code Execution | 2001-03-31 |
| Exploit-DB | Microsoft Windows 2000/XP - SMB Authentication Remote Overflow | 2003-04-25 |
| Exploit-DB | Microsoft Windows - SmbRelay3 NTLM Replay (MS08-068) | 2008-11-14 |
| Exploit-DB | Microsoft Windows - SMB Relay Code Execution (MS08-068) (Metasploit) | 2010-09-21 |
What each source reports
NVD Score used
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.
- Record
CVE-2008-4037- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE ListNo score
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.
- Record
CVE-2008-4037- Updated
- 2026-11-02
EUVDEUVD-2008-4022No score
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.
- Record
EUVD-2008-4022- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g42p-2gq8-x2p3No score
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold...
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.
- Record
GHSA-g42p-2gq8-x2p3- Weakness
- CWE-287
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
marc.info?l=bugtraq&m=122703006921213&w=2
networkworld.com/news/2008/111208-microsoft-seven-year-security-patch.html
us-cert.gov/cas/techalerts/TA08-316A.html
veracode.com/blog/2008/11/microsoft-fixes-8-year-old-design-flaw-in-smb
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6012
osvdb.org/49736
Show 11 moreShow less
securitytracker.com/id?1021163
vupen.com/english/advisories/2008/3110
xfocus.net/articles/200305/smbrelay.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-068
securityfocus.com/data/vulnerabilities/exploits/backrush.patch
secunia.com/advisories/32633
exploit-db.com/exploits/7125
nvd.nist.gov/vuln/detail/CVE-2008-4037
github.com/advisories/GHSA-g42p-2gq8-x2p3