Description
The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows remote attackers to cause a denial of service (authentication downgrade or outage) via a crafted request that triggers name collisions, aka "Active Directory SPN Validation Vulnerability."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-005 ↗
- http://osvdb.org/70825 ↗
- http://www.vupen.com/english/advisories/2011/0319 ↗
- http://www.securitytracker.com/id?1025042 ↗
- http://secunia.com/advisories/43215 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64915 ↗
- http://www.securityfocus.com/bid/46145 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12485 ↗