CERTA-2011-AVI-624
Vulnerability from certfr_avis

Une vulnérabilité dans Active Directory permet de contourner la politique de sécurité et d'élever ses privilèges.

Description

Une vulnérabilité existe dans Active Directory lorsque LDAPS (LDAP sur SSL) est utilisé. Un attaquant, ayant en sa possession un certificat expiré, peut utiliser celui-ci pour s'authentifier sur le domaine avec les privilèges du compte associé.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Microsoft Windows Active Directory et AD LDS, Windows Server 2008 R2 pour systèmes x64.
Microsoft Windows Active Directory Lightweight Directory Service (AD LDS), Windows Vista Service pack 2 ;
Microsoft Windows AD LDS, Windows 7 pour systèmes 32 bits ;
Microsoft Windows ADAM, Windows XP Édition Professionnelle x64 Service Pack 2 ;
Microsoft Windows Active Directory et AD LDS, Windows Server 2008 32 bits et Windows Server 2008 32 bits Service Pack 2 ;
Microsoft Windows AD LDS, Windows Vista Édition x64 Service Pack 2 ;
Microsoft Windows AD LDS, Windows 7 pour systèmes x64 ;
Microsoft Windows Active Directory, Windows Server 2003 avec Service Pack 2 pour systèmes Itanium ;
Microsoft Windows Active Directory et ADAM, Windows Server 2003 Service Pack 2 ;
Microsoft Windows Active Directory et ADAM, Windows Server 2003 Édition x64 Service Pack 2 ;
Microsoft Windows Active Directory et AD LDS, Windows Server 2008 système x64 et Windows Server 2008 x64 Service Pack 2 ;
Microsoft Windows Active Directory en mode application (ADAM), Windows XP Service Pack 3 ;
References

Show details on source website

To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Active Directory et AD LDS, Windows Server 2008 R2 pour syst\u00e8mes x64.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Active Directory Lightweight Directory Service (AD LDS), Windows Vista Service pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "AD LDS, Windows 7 pour syst\u00e8mes 32 bits ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "ADAM, Windows XP \u00c9dition Professionnelle x64 Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Active Directory et AD LDS, Windows Server 2008 32 bits et Windows Server 2008 32 bits Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "AD LDS, Windows Vista \u00c9dition x64 Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "AD LDS, Windows 7 pour syst\u00e8mes x64 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Active Directory, Windows Server 2003 avec Service Pack 2 pour syst\u00e8mes Itanium ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Active Directory et ADAM, Windows Server 2003 Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Active Directory et ADAM, Windows Server 2003 \u00c9dition x64 Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Active Directory et AD LDS, Windows Server 2008 syst\u00e8me x64 et Windows Server 2008 x64 Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Active Directory en mode application (ADAM), Windows XP Service Pack 3 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 existe dans Active Directory lorsque LDAPS (LDAP sur\nSSL) est utilis\u00e9. Un attaquant, ayant en sa possession un certificat\nexpir\u00e9, peut utiliser celui-ci pour s\u0027authentifier sur le domaine avec\nles privil\u00e8ges du compte associ\u00e9.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-2014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2014"
    }
  ],
  "initial_release_date": "2011-11-09T00:00:00",
  "last_revision_date": "2011-11-09T00:00:00",
  "links": [],
  "reference": "CERTA-2011-AVI-624",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2011-11-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans \u003cspan class=\"textit\"\u003eActive Directory\u003c/span\u003e\npermet de contourner la politique de s\u00e9curit\u00e9 et d\u0027\u00e9lever ses\nprivil\u00e8ges.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Microsoft Active Directory",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS11-086 du 08 novembre 2011",
      "url": "http://technet.microsoft.com/en-us/security/bulletin/MS11-086"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.