This script is Copyright (C) 2011-2014 Tenable Network Security, Inc.
The directory service on the remote host is affected by denial of
The version of Active Directory installed on the remote host fails to
properly validate service principal names (SPN), which could result in
SPN collisions. If a collision occurs, services that use the SPN will
downgrade to NTLM when configured to do so. Services that are not
configured to negotiate will become unavailable.
A remote attacker who has local administrator privileges on a domain-
joined host can exploit this, resulting in a denial of service.
See also :
Microsoft has released a patch for Windows 2003.
Risk factor :
Medium / CVSS Base Score : 5.0
CVSS Temporal Score : 4.1
Public Exploit Available : true