PT-2012-2232 · Microsoft · Windows Server 2008 R2+2

Publicado 2012-03-13 · Atualizado 2020-09-28 · CVE-2012-0006

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1

Description The issue is related to the DNS server in Microsoft Windows Server, where it fails to properly handle objects in memory during record lookup. This allows remote attackers to cause a denial of service, resulting in a daemon restart, by sending a crafted query.

Recommendations For Microsoft Windows Server 2003 SP2, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 SP2, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 R2, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 R2 SP1, update to a version that includes the fix for this issue.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2012-0006

Produtos afetados

Windows Server 2003 Sp2

Windows Server 2008 R2

Windows Server 2008 R2 Sp1

Referências · 8

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-017 · Aviso do Fabricante
• http://osvdb.org/80005 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0006 · Nota de Segurança
• http://securityfocus.com/bid/52374 · Nota
• http://us-cert.gov/cas/techalerts/TA12-073A.html · Nota
• http://securitytracker.com/id?1026789 · Nota
• http://secunia.com/advisories/48394 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15098 · Nota