CVE-2011-1966 The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code vi...
HighCVSS 10.0
EPSS 55.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows server 2008 | All versions | No fix listed |
| Microsoft windows server 2008 | = r2 | No fix listed |
References
- TA11-221A third-party-advisory us-government-resource
- MS11-058 vendor-advisory
- oval:org.mitre.oval:def:12764 signature vdb-entry