Описание
The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows remote attackers to cause a denial of service (authentication downgrade or outage) via a crafted request that triggers name collisions, aka "Active Directory SPN Validation Vulnerability."
The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows remote attackers to cause a denial of service (authentication downgrade or outage) via a crafted request that triggers name collisions, aka "Active Directory SPN Validation Vulnerability."
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2011-0040
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-005
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64915
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12485
- http://osvdb.org/70825
- http://secunia.com/advisories/43215
- http://www.securityfocus.com/bid/46145
- http://www.securitytracker.com/id?1025042
- http://www.vupen.com/english/advisories/2011/0319
Связанные уязвимости
The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows remote attackers to cause a denial of service (authentication downgrade or outage) via a crafted request that triggers name collisions, aka "Active Directory SPN Validation Vulnerability."