Summary
It is possible to disclose LDAP information.
Description :
The directory base of the remote server is set to NULL. This allows information to be enumerated without any prior knowledge of the directory structure.
Solution
If pre-Windows 2000 compatibility is not required, remove pre-Windows 2000 compatibility as follows :
- start cmd.exe
- execute the command :
net localgroup 'Pre-Windows 2000 Compatible Access' everyone /delete - restart the remote host