[SengirV]

So in order to exploit this, you must have total control over my network, since you are replacing the existing LDAP server. Yes it is a problem, but far from the usual windows problems where opening up an email totally screws you over.

[Bush2000]

So in order to exploit this, you must have total control over my network, since you are replacing the existing LDAP server

Not true. All that I have to do is get your client machine to use my box as the LDAP server. That isn't difficult, particularly if I have access to the network segment on which the machine-to-be-attacked resides.

[general_re]

So in order to exploit this, you must have total control over my network, since you are replacing the existing LDAP server.

No, I just have to find a wireless user and pretend to be an LDAP server...