PT-2013-3040 · Microsoft · Windows Server 2008 R2+1

Published 2013-02-13 · Updated 2020-09-28 · CVE-2013-1281

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows Server 2012

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and system reboot. This occurs when an attacker attempts to rename a file or folder located on a read-only share.

Recommendations For Microsoft Windows Server 2008 R2 and R2 SP1, apply the necessary patch to fix the NULL pointer dereference issue. For Microsoft Windows Server 2012, apply the necessary patch to fix the NULL pointer dereference issue. As a temporary workaround, consider restricting access to read-only shares to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2013-1281

Affected Products

Windows Server 2008 R2

Windows Server 2012

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-1281 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-014 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16388 · Note
• http://us-cert.gov/cas/techalerts/TA13-043B.html · Note