MS11-005: Vulnerability in Active Directory Could Allow Denial of Service (2478953)
Medium Nessus Plugin ID 51905
SynopsisThe directory service on the remote host is affected by denial of
DescriptionThe version of Active Directory installed on the remote host fails to
properly validate service principal names (SPN), which could result in
SPN collisions. If a collision occurs, services that use the SPN will
downgrade to NTLM when configured to do so. Services that are not
configured to negotiate will become unavailable.
A remote attacker who has local administrator privileges on a domain-
joined host can exploit this, resulting in a denial of service.
SolutionMicrosoft has released a patch for Windows 2003.