PT-2014-1730 · Microsoft · Windows Vista+4

Andrew Bartlett + 1 · Published 2014-03-11 · Updated 2023-12-07 · CVE-2014-0317

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows Server 2012 versions Gold through R2

Description The issue is related to the Security Account Manager Remote (SAMR) protocol implementation, which does not properly determine the user-lockout state. This makes it easier for remote attackers to bypass the account lockout policy and obtain access via a brute-force attack.

Recommendations For Microsoft Windows XP versions SP2 through SP3, update the system to address the SAMR security feature bypass issue. For Microsoft Windows Server 2003 version SP2, apply the necessary patch to fix the SAMR protocol implementation. For Microsoft Windows Vista version SP2, install the latest security update to resolve the issue. For Microsoft Windows Server 2008 versions SP2 through R2 SP1, apply the recommended hotfix to mitigate the vulnerability. For Microsoft Windows Server 2012 versions Gold through R2, update the system with the latest security patches to address the SAMR security feature bypass issue.

Fix

RCE

Weakness Enumeration

CWE-20

CWE-264

Related Identifiers

BDU:2015-00743

CVE-2014-0317

Affected Products

Windows Server 2003

Windows Server 2008

Windows Server 2012

Windows Vista

Windows Xp

References · 5

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0317 · Security Note
• https://bdu.fstec.ru/vul/2015-00743 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-016 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0317 · Security Note
• http://technet.microsoft.com/en-us/security/bulletin/ms14-016 · Note