CVE-2011-0040

Name of the Vulnerable Software and Affected Versions Windows Server 2003 SP2

Description The issue arises from the server in Microsoft Active Directory not properly handling an update request for a service principal name (SPN), allowing remote attackers to cause a denial of service, such as authentication downgrade or outage. This is achieved through a crafted request that triggers name collisions.

Recommendations For Windows Server 2003 SP2, apply the necessary patch to resolve the Active Directory SPN validation issue.