CVE-2011-0040

The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows…

published February 9, 2011

CVSS
—
EPSS
23%
Percentile
97.7
In the wild
Unconfirmed
What it is

The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows remote attackers to cause a denial of service (authentication downgrade or outage) via a crafted request that triggers name collisions, aka "Active Directory SPN Validation Vulnerability."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.22760 · 97.7th percentile
Published
2011-02-09T00:00Z
EPSS history
Timeline
  • 09 FEB 00:00Z
    The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows…
    cvelistv5