Microsoft Active Directory Service Principal Names (CVE-2011-0040) Denial Of Service Vulnerability
BID:46145
Info
Microsoft Active Directory Service Principal Names (CVE-2011-0040) Denial Of Service Vulnerability
| Bugtraq ID: | 46145 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2011-0040 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 08 2011 12:00AM |
| Updated: | Feb 11 2011 03:30PM |
| Credit: | Microsoft |
| Vulnerable: |
Microsoft Windows Server 2003 Standard Edition SP2 Microsoft Windows Server 2003 Itanium SP2 Microsoft Active Directory 0 Avaya Messaging Application Server 5.2 Avaya Messaging Application Server 5 Avaya Messaging Application Server 4 Avaya Meeting Exchange - Webportal 0 Avaya Meeting Exchange - Web Conferencing Server 0 Avaya Meeting Exchange - Streaming Server 0 Avaya Meeting Exchange - Recording Server 0 Avaya Meeting Exchange - Client Registration Server 0 Avaya Meeting Exchange 5.0 .0.52 Avaya Meeting Exchange 5.2 SP2 Avaya Meeting Exchange 5.2 SP1 Avaya Meeting Exchange 5.2 Avaya Meeting Exchange 5.1 SP1 Avaya Meeting Exchange 5.1 Avaya Meeting Exchange 5.0 SP2 Avaya Meeting Exchange 5.0 SP1 Avaya Meeting Exchange 5.0 Avaya Communication Server 1000 Telephony Manager 4.0 Avaya Communication Server 1000 Telephony Manager 3.0 Avaya CallPilot 5.0 Avaya CallPilot 4.0 3DM Software Disk Management Software SP2 |
| Not Vulnerable: | |
Discussion
Microsoft Active Directory Service Principal Names (CVE-2011-0040) Denial Of Service Vulnerability
Microsoft Active Directory is prone to a denial-of-service vulnerability.
An attacker can exploit this issue by sending specially crafted packets to the affected server.
A successful exploit may cause name collisions in the domain or possibly cause the affected server to become unresponsive.
Microsoft Active Directory is prone to a denial-of-service vulnerability.
An attacker can exploit this issue by sending specially crafted packets to the affected server.
A successful exploit may cause name collisions in the domain or possibly cause the affected server to become unresponsive.
Exploit / POC
Microsoft Active Directory Service Principal Names (CVE-2011-0040) Denial Of Service Vulnerability
Attackers can use readily available tools to exploit this issue.
Attackers can use readily available tools to exploit this issue.
Solution / Fix
Microsoft Active Directory Service Principal Names (CVE-2011-0040) Denial Of Service Vulnerability
Solution:
Vendor updates are available. Please see the referenced advisory for more information.
Microsoft Active Directory 0
Solution:
Vendor updates are available. Please see the referenced advisory for more information.
Microsoft Active Directory 0
-
Microsoft WindowsServer2003-KB2478953-ia64-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=4AC66EAE-E6D8 -4E8B-B4EA-E7A77CC74DB0 -
Microsoft WindowsServer2003.WindowsXP-KB2478953-x64-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=EC962B0E-E951 -4E70-8D97-8C2AFD360C28 -
Microsoft WindowsServer2003-KB2478953-x86-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=651C1F4F-4E69 -4D17-8AA2-72681DFC5463
References
Microsoft Active Directory Service Principal Names (CVE-2011-0040) Denial Of Service Vulnerability
References:
References:
- Microsoft Homepage (Microsoft)
- ASA-2011-026 MS11-005 Vulnerability in Active Directory Could Allow Denial of Se (Avaya)
- Microsoft Security Bulletin MS11-005 (Microsoft)