Signature Detail
Short Name |
NFS:MS-WINDOWS-NFS-NULL-DOS |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
NFS |
Keywords |
Microsoft Windows NFS Server NULL Pointer Dereference Denial of Service |
Release Date |
2013/02/18 |
Update Number |
2234 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
NFS: Microsoft Windows NFS Server NULL Pointer Dereference Denial of Service
This signature detects attempts to exploit a known vulnerability against Microsoft Windows NFS Server. A successful attack can result in a denial-of-service condition.
Extended Description
The NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via an attempted renaming of a file or folder located on a read-only share, aka "NULL Dereference Vulnerability."
Affected Products
- microsoft windows_server_2008 r2 (-:itanium)
- microsoft windows_server_2008 r2 (sp1:itanium)
- microsoft windows_server_2008 r2 (sp1:x64)
- microsoft windows_server_2008 r2 (-:x64)
- microsoft windows_server_2012 -
References
- BugTraq: 57853
- CVE: CVE-2013-1281