PT-2011-2037
CVE-2011-0040
·
تاريخ النشر
2011-02-09
·
تاريخ التحديث
2018-10-12
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Windows Server 2003 SP2
Description
The issue arises from the server in Microsoft Active Directory not properly handling an update request for a service principal name (SPN), allowing remote attackers to cause a denial of service, such as authentication downgrade or outage. This is achieved through a crafted request that triggers name collisions.
Recommendations
For Windows Server 2003 SP2, apply the necessary patch to resolve the Active Directory SPN validation issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾