CVE ID:	CVE-2008-4037
Description:	Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834.
Test IDs:	1.3.6.1.4.1.25623.1.0.803514   1.3.6.1.4.1.25623.1.0.900057
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4037 BugTraq ID: 7385 http://www.securityfocus.com/bid/7385 Cert/CC Advisory: TA08-316A http://www.us-cert.gov/cas/techalerts/TA08-316A.html https://www.exploit-db.com/exploits/7125 HPdes Security Advisory: HPSBST02386 http://marc.info/?l=bugtraq&m=122703006921213&w=2 HPdes Security Advisory: SSRT080164 http://marc.info/?l=bugtraq&m=122703006921213&w=2 http://www.networkworld.com/news/2008/111208-microsoft-seven-year-security-patch.html http://www.securityfocus.com/data/vulnerabilities/exploits/backrush.patch http://www.securityfocus.com/data/vulnerabilities/exploits/backrush.patch.README http://www.veracode.com/blog/2008/11/microsoft-fixes-8-year-old-design-flaw-in-smb/ http://www.xfocus.net/articles/200305/smbrelay.html Microsoft Security Bulletin: MS08-068 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-068 http://osvdb.org/49736 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6012 http://securitytracker.com/id?1021163 http://secunia.com/advisories/32633 http://www.vupen.com/english/advisories/2008/3110