CVE-2011-0040
09.02.2011, 01:00
The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows remote attackers to cause a denial of service (authentication downgrade or outage) via a crafted request that triggers name collisions, aka "Active Directory SPN Validation Vulnerability."Enginsight
Vendor | Product | Version |
---|---|---|
microsoft | windows_2003_server | * |
microsoft | windows_2003_server | * |
microsoft | windows_2003_server | * |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References