Description
The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows remote attackers to cause a denial of service (authentication downgrade or outage) via a crafted request that triggers name collisions, aka "Active Directory SPN Validation Vulnerability."
References
- MS11-005 vendor-advisory
- 70825 vdb-entry
- ADV-2011-0319 vdb-entry
- 1025042 vdb-entry
- 43215 third-party-advisory
- ms-win-active-directory-dos(64915) vdb-entry
- 46145 vdb-entry
- oval:org.mitre.oval:def:12485 vdb-entry signature