PT-2011-2081 · Microsoft · Windows Server 2008 R2+3

Scott Stender · Published 2011-02-10 · Updated 2018-10-30 · CVE-2011-0091

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 (affected versions not specified)

Description A spoofing issue exists in Kerberos implementations, allowing man-in-the-middle attackers to downgrade the encryption from strong encryption to DES, potentially spoofing network traffic and obtaining sensitive information. This occurs because Kerberos authentication can be downgraded to use DES instead of the default stronger encryption standards.

Recommendations For Windows Server 2008 R2 and Windows 7, consider configuring Kerberos to prevent the use of DES encryption as a temporary workaround until a patch is available. Restrict access to sensitive information and network resources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2011-0091

Affected Products

Kerberos

Windows

Windows 7

Windows Server 2008 R2

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2011-0091 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-013 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0091 · Security Note
• http://securitytracker.com/id?1025048 · Note
• http://support.avaya.com/css/P8/documents/100127250 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64901 · Note
• http://securityfocus.com/bid/46140 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-013 · Note
• http://osvdb.org/70835 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12498 · Note
• http://secunia.com/advisories/43257 · Note
• http://vupen.com/english/advisories/2011/0326 · Note