PT-2011-3508 · Microsoft · Windows Server 2008 R2+1

Publicado 2011-08-10 · Atualizado 2020-09-28 · CVE-2011-1966

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1

Description The issue arises from the DNS server's improper handling of NAPTR queries that trigger recursive processing. This allows remote attackers to execute arbitrary code via a crafted query.

Recommendations For Microsoft Windows Server 2008 SP2, apply the necessary patch to fix the DNS server's handling of NAPTR queries. For Microsoft Windows Server 2008 R2, apply the necessary patch to fix the DNS server's handling of NAPTR queries. For Microsoft Windows Server 2008 R2 SP1, apply the necessary patch to fix the DNS server's handling of NAPTR queries.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-1966

Produtos afetados

Windows Server 2008 R2

Windows Server 2008 R2 Sp1

Referências · 4

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12764 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1966 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA11-221A.html · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-058 · Aviso do Fabricante