{"vuid":"VU#610133","idnumber":"610133","name":"Microsoft Windows domain controller denial of service in Kerberos message handling","keywords":["Microsoft","Kerberos","DoS","Denial of Service","MS05-042"],"overview":"Microsoft Windows domain controllers do not properly handle some Kerberos messages, potentially allowing a remote, authenticated attacker to cause a denial-of-service condition.","clean_desc":"Microsoft Windows domain controllers running Windows 2000 Server and Server 2003 use the Kerberos protocol for authentication by default. The Kerberos implementation in the affected products is vulnerable to a flaw in handling messages from remote authenticated users. This flaw may allow an attacker to cause the authentication system to stop responding or to forcefully reboot the domain controller. Systems running the affected products that do not function as domain controllers are not affected. Windows 2000 Professional and Windows XP are not affected. The attacker must have valid logon credentials in order to exploit the vulnerability.","impact":"A remote authenticated user that is able to send a specially-crafted message may be able to cause the domain controller authentication service to stop responding, or to force the machine to reboot.","resolution":"Apply An Update\nPlease see Microsoft Security Bulletin MS05-042 for information on fixes, updates, and workarounds.","workarounds":"","sysaffected":"","thanks":"Thanks to Microsoft Security Advisory for information on this vulnerability, who in turn thank Tony Chin of Shell, Inc. for reporting the issue.","author":"This document was written by Ken MacInnis.","public":["h","t","t","p",":","/","/","w","w","w",".","m","i","c","r","o","s","o","f","t",".","c","o","m","/","t","e","c","h","n","e","t","/","s","e","c","u","r","i","t","y","/","b","u","l","l","e","t","i","n","/","M","S","0","5","-","0","4","2",".","m","s","p","x"],"cveids":["CVE-2005-1981"],"certadvisory":"","uscerttechnicalalert":null,"datecreated":"2005-08-09T18:09:43Z","publicdate":"2005-08-09T00:00:00Z","datefirstpublished":"2005-08-10T15:06:28Z","dateupdated":"2005-08-10T15:08:21Z","revision":10,"vrda_d1_directreport":"","vrda_d1_population":"","vrda_d1_impact":"","cam_widelyknown":"15","cam_exploitation":"0","cam_internetinfrastructure":"12","cam_population":"15","cam_impact":"9","cam_easeofexploitation":"10","cam_attackeraccessrequired":"16","cam_scorecurrent":"10.935","cam_scorecurrentwidelyknown":"12.96","cam_scorecurrentwidelyknownexploited":"21.06","ipprotocol":"","cvss_accessvector":"","cvss_accesscomplexity":"","cvss_authentication":null,"cvss_confidentialityimpact":"","cvss_integrityimpact":"","cvss_availabilityimpact":"","cvss_exploitablity":null,"cvss_remediationlevel":"","cvss_reportconfidence":"","cvss_collateraldamagepotential":"","cvss_targetdistribution":"","cvss_securityrequirementscr":"","cvss_securityrequirementsir":"","cvss_securityrequirementsar":"","cvss_basescore":"","cvss_basevector":"","cvss_temporalscore":"","cvss_environmentalscore":"","cvss_environmentalvector":"","metric":10.935,"vulnote":null}