PT-2014-1674 · Microsoft · Lync Server 2013

Publicado 2014-09-09 · Atualizado 2018-10-12 · CVE-2014-4071

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Lync Server 2013

Description The issue allows an attacker to cause a denial of service, resulting in a system crash. This can be achieved through a crafted request, which leads to a NULL pointer dereference and daemon hang.

Recommendations For Microsoft Lync Server 2013, consider restricting access to the server to minimize the risk of exploitation until a patch is available. As a temporary workaround, apply configuration changes to limit the impact of crafted requests.

Correção

Identificadores relacionados

BDU:2015-00610

CVE-2014-4071

Produtos afetados

Lync Server 2013

Referências · 9

• https://exchange.xforce.ibmcloud.com/vulnerabilities/95547 · Nota
• http://blogs.technet.com/b/srd/archive/2014/09/09/assessing-risk-for-the-september-2014-security-updates.aspx · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4071 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2014-4071 · Nota de Segurança
• http://securitytracker.com/id/1030821 · Nota
• http://technet.microsoft.com/en-us/security/bulletin/ms14-055 · Nota
• https://bdu.fstec.ru/vul/2015-00610 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-055 · Aviso do Fabricante
• http://securityfocus.com/bid/69592 · Nota