CVE-2013-1281

2013-02-1312:04:14

CWE-399

microsoft

web.nvd.nist.gov

106

nfs

microsoft windows

server 2008

server 2012

null pointer dereference

denial of service

vulnerability

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.941

Percentile

99.2%

JSON

The NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via an attempted renaming of a file or folder located on a read-only share, aka “NULL Dereference Vulnerability.”

Affected configurations

Nvd

Node

microsoftwindows_server_2008Matchr2-itanium

microsoftwindows_server_2008Matchr2-x64

Node

microsoftwindows_server_2012Match-

VendorProductVersionCPE
microsoftwindows_server_2008r2cpe:2.3:o:microsoft:windows_server_2008:r2:-:itanium:*:*:*:*:*
microsoftwindows_server_2008r2cpe:2.3:o:microsoft:windows_server_2008:r2:-:x64:*:*:*:*:*
microsoftwindows_server_2012-cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_server_2008	r2	cpe:2.3:o:microsoft:windows_server_2008:r2:-:itanium:::::*
microsoft	windows_server_2008	r2	cpe:2.3:o:microsoft:windows_server_2008:r2:-:x64:::::*
microsoft	windows_server_2012	-	cpe:2.3:o:microsoft:windows_server_2012:-:::::::*