PT-2013-3040 · Microsoft · Windows Server 2008 R2+1

Publicado 2013-02-13 · Atualizado 2020-09-28 · CVE-2013-1281

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows Server 2012

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and system reboot. This occurs when an attacker attempts to rename a file or folder located on a read-only share.

Recommendations For Microsoft Windows Server 2008 R2 and R2 SP1, apply the necessary patch to fix the NULL pointer dereference issue. For Microsoft Windows Server 2012, apply the necessary patch to fix the NULL pointer dereference issue. As a temporary workaround, consider restricting access to read-only shares to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2013-1281

Produtos afetados

Windows Server 2008 R2

Windows Server 2012

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-1281 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-014 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16388 · Nota
• http://us-cert.gov/cas/techalerts/TA13-043B.html · Nota