PT-2012-2232 · Microsoft · Windows Server 2008 R2+2

Published 2012-03-13 · Updated 2020-09-28 · CVE-2012-0006

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1

Description The issue is related to the DNS server in Microsoft Windows Server, where it fails to properly handle objects in memory during record lookup. This allows remote attackers to cause a denial of service, resulting in a daemon restart, by sending a crafted query.

Recommendations For Microsoft Windows Server 2003 SP2, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 SP2, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 R2, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 R2 SP1, update to a version that includes the fix for this issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2012-0006

Affected Products

Windows Server 2003 Sp2

Windows Server 2008 R2

Windows Server 2008 R2 Sp1

References · 8

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-017 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0006 · Security Note
• http://osvdb.org/80005 · Note
• http://securityfocus.com/bid/52374 · Note
• http://us-cert.gov/cas/techalerts/TA12-073A.html · Note
• http://securitytracker.com/id?1026789 · Note
• http://secunia.com/advisories/48394 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15098 · Note