PT-2015-2001 · Microsoft · Windows Server 2008+3

Published 2015-09-08 · Updated 2019-05-08 · CVE-2015-2535

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows Server 2012 Gold and R2

Description The issue is related to errors in the code of the Active Directory service in Windows. It allows a remote authenticated user to cause a denial of service by creating multiple machine accounts. This can lead to the Active Directory service becoming non-responsive. An attacker must have valid credentials to exploit this issue.

Recommendations For Microsoft Windows Server 2008 SP2 and R2 SP1, update to a version that includes the fix for this issue. For Microsoft Windows Server 2012 Gold and R2, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting the ability to create machine accounts in the Active Directory to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-11347

CVE-2015-2535

DSA-3433-1

Affected Products

Active Directory

Windows

Windows Server 2008

Windows Server 2012

References · 26

• https://bdu.fstec.ru/vul/2021-01296 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5296 · Security Note
• https://security-tracker.debian.org/tracker/source-package/samba · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7540 · Security Note
• https://bdu.fstec.ru/vul/2021-01299 · Security Note
• https://security-tracker.debian.org/tracker/DSA-3433-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11347 · Security Note
• https://bdu.fstec.ru/vul/2021-01297 · Security Note
• https://bdu.fstec.ru/vul/2021-01298 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-096 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00973 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-2535 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8467 · Security Note
• https://bdu.fstec.ru/vul/2021-01295 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3223 · Security Note