CVE-2015-0005
Microsoft Windows Server 2003 SP2, 2008 SP2/R2 SP1, 2012/2012 R2 - NETLOGON Spoofing via Computer Name Spoofing
Title source: llmDescription
The NETLOGON service in Microsoft Windows Server 2003 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2, when a Domain Controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, aka "NETLOGON Spoofing Vulnerability."
References (6)
Core 6
Core References
Various Sources x_refsource_confirm
https://www.samba.org/samba/history/samba-4.2.10.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1031891
Exploit x_refsource_misc
http://packetstormsecurity.com/files/130773/Windows-Pass-Through-Authentication-Methods-Improper-Validation.html
Mailing List mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2015/Mar/60
Exploit x_refsource_misc
http://www.coresecurity.com/advisories/windows-pass-through-authentication-methods-improper-validation
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-027
Scores
EPSS
0.1817
EPSS Percentile
96.9%
Details
CWE
CWE-254
Status
published
Products (5)
microsoft/windows_2003_server
microsoft/windows_server_2008
microsoft/windows_server_2008
r2 sp1
microsoft/windows_server_2012
microsoft/windows_server_2012
r2 (3 CPE variants)
Published
Mar 11, 2015
Tracked Since
Feb 18, 2026