MS11-005: Vulnerability in Active Directory Could Allow Denial of Service (2478953)
Medium Nessus Plugin ID 51905
SynopsisThe directory service on the remote host is affected by denial of service vulnerability.
DescriptionThe version of Active Directory installed on the remote host fails to properly validate service principal names (SPN), which could result in SPN collisions. If a collision occurs, services that use the SPN will downgrade to NTLM when configured to do so. Services that are not configured to negotiate will become unavailable.
A remote attacker who has local administrator privileges on a domain- joined host can exploit this, resulting in a denial of service.
SolutionMicrosoft has released a patch for Windows 2003.